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iejUu^cA^ I p>'^'y-y hoy^-yi^'mmicnut-.-r^y^ 

JO ;b^U Vi'*^<^^^faj9]Rgi:«»cSa5i!L. ii(IBBA:'3 I P 

jaUTv^s«-&tc«. 7'y*/i'h<oy^?v^v>if^1^ 

^firjne/^-y -y F 7 -< -/u^ u y <>*^iS'Nji-r c t^^^mi: 

tmmXtl I P-'^'ir-y F(0TFUXl«$Bi:»c«j£;L/-c7 

tc^^S'C'O' F BjwtnBis-r^-r^v F^Bts^is 

30 

Bi}fB*3i:':>S««i. 
iwmm 101 

HufB*3i;0^^«, 2 etc. 

F ;< f vaiij*5*5 J: O* i' ySiJ*^cD'>^ < ti,-:f3^it 

[ifijRili 1] 
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50 r»<J^*lJ^t-?.Kfe/i:0, BtliB'JVi'^^SLT. 
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>y^E{±nrj32l^SI5^-->' ^ '7-^'±<0+)— ''^A^e.'>^ < 
i: «rit*?S i: -r « lASSK® 

tiiaiciass-r set ^iMfgi i: t^m^m 1 4 i!2imoij5t^ 

[llsltii 17] 
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m^tmsi^mc^-Drmm^n^c tic. mmmmm^ 
wmr^m i wmmm^&t. 

JO mm 2 mwm^m^f&^^!&isfi-r^rztb<oi^m!&m^m 
L fc{i^*^MM-r s ^ 2 Sir saa^ifi i: . 

[MaI^^I 9] 

3S1 8iB«c<Dik«KSI15^XT-i>o 
[Sl^^li^ 2 0] 

i:t-Sni'i*ini 8!?Bim<OlAS?l?6fflli>'X-rAo 

mim 2 1 ] 

[M^Il=t2 2] 

hij5B*3 t D ^e^i. m^y 7 -fry* efejH 

f S c i:T'iS?«tO^»*1^a3-r «.iSj^<^fl]#IS*^t- 

s n t^'^mtr^m^m i 3nBiiiE<Disi'^R6P->>^7" 

Ac 

CW5K«2 3] 

40 I P / ^-y -y b KM LTHulB^5l«^a]#lfiA^i3Ji£^^53] L 

2 IBScOiJcmSSv'X-r Ao 
[li*3S2 4] 

lcfl^5-l''^vh^-B#6*l»ctB1S-r MB«#PS 
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■r i> 2 6 nB jiiE^oiS('fi?ii6ffl x 7^ 

[Ii*3l2 8] 

ftjIBrtSlS^^'y hy— ^±cO'9--/^7b^eHuIB*5i:D^B-^ 
< ^ ^> :7 r ^;l/^^X7^I.^?fl'^-"r S ^ ^ - U 

HulB:Jo^t)^MTi$(«f*^^^^n^^. mlfBa^-U 

^^Witir^m>Rmi 3iBKWjc^Kt3liv/Xv^i^c 
Hg^iFi2 9] 

fiunB7 7- ^ r ;t — 

>5r F ^ mllBm 2 *i3g5ta}R¥l5*5 ^ t/tulB^ ^ D 

tt^^bim-^^nrcmt^Xti i p/^^*y hcoasKiTt: i f 
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C ^«:1tm^-rs*SSI558il'>X-rixo 
[nl'l*ifi3 0] 
BulB*3^0^Sti. 
•9--lfxyu-feXc0^tTlc^i5i/^T> '>3^< i:t^^'y F 

tOIB-Y-^V FfBti#l5tcfB1t^n/c^-^VFr^cO@m 

umms 1] 

ioL/c;U-;i/lcL/c7b^oT. SulB+^-exyu-tX(0^ 
!r*®^-r^BiSARigi2 9 3Bili!cOifc^R5ffll5^XT-Ao 

tu L /c ;l/ L /j^ o T . nu nB+f- tTX^u-bXco^ 

it^^-rsfg^ias oicfs^oTfes?i»e3J'>xxAo 

[M:dtiH3 3] 

ttJiBijt^ltJD^Ifiti. fJIB F ;^ >$ij,^*5 J: U'tOIB^ 

30 n-bXOi^-r-OFi:. -f-^^ FO%^JmHi:^o/c: 

■r^ni^*ii?i3 2eilE03Gj^SSK?aii^x-rAo 
[iiAltil3 4] 

tillB^s ^ 0 ^B:fe J: t/MiB:7 r^T^ ^— ;l/gBti*- 
:i-»y Ftci|X^^nri-^^ci:;&«tfe!(i:'r^itdtS2 9 

HtJiHrtgP^^^y F7-^±O^J— /^;b>8BufBfe^ (?ilB^ 
^>j5:< ^^.y'r-f;b>'XxA^?r''^'rs^^-U>'^*S 

^-i^-^iiltiiflOltBl^SP^^ -y F ^7- ^±<?3-'^->'^J^^ ^>^>^ < 
^?.77'-r;b>'XxA^ Bu IB4o i: D mm^iMMf ^ c ^ 
^1f®^-r^lS*iH2 9lBS^Oifc»E6^^:^X-rAo 
[M5ltlpt3 6] 

rtg(5^^^y Fy-^hn^P^-^^y Fy-^^^oi^^ici5B^ 
nfc7 r T ;^ -";l/^Btc*5tt^to t 0 SB^fflv^/c 

50 i^^mMi.. 
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Kill P/^^y'homi^y^^^^^^^^til P^^^ 
[ii«Il3 8] 

flSfgA;^! p^<^yho:>^^i PT¥u:^tm^mm 

[ilf?AR3¥i3 9] 
[Ii*ri4 0] 

c t tr^ mmR s e mm^H'mmwyDHc 
im^m4 2] 
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HiiiBS5»oW«^«lfi]"r s XX :/fri> 

hy-^Affi:^^> y T^;bA{±S;^ii:. 

[|fi*3S4 3] 

HuIBifeSStOW^i^«l»]-r SX-r -y ^it. 

> h cD^g^Dji® ^ fc ^y h y — ^ ^ > h ^ ^ 
ffltH-r^c^^#tii^-r^is*JS4 Atmcoxxm^myj 

So 

3(? 4 3 ^ /cCi: 4 4 tClBSOIj^^ltftlT^ ffio 

[18^^4 7] 

xtii p^^^yhcommfci PTh^uTs^cn-t^mm 

X X -y y'^^^-r ^ c i: ^JKiSt § ^icmmmii\i.o 
MIBii^ga^Sitr ^ X-r ^y ^ ti. 
xto{i3liS^^^i^ft^jgo«I^MrfBt^'Ji:^U 7yb^-r 

MIB'J T^b^^f AfiSSax^-^-^-XtcfSSfl^^fcfc 

^ (it giuiiiJb^ r ^ -b X ^ n ^ cT ^ ^ IS f^;^)ii: ^ shi^t b . 
50 ffllBU z;i/^-f A{i3iffiT--^'^-x(7:)rtS^5tmM 
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[g|*«4 9] 
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[M*I15 3] 

^mu L /c7i/-;b t ^m^-r ^^wl t-r^ 
5 1 mm<oitcm^^y5mo 

[M*JS5 4] 

So 

[|i^]I5 5] 

wmm5 6] 
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50 y T-rz'^^i-— ^^S^c 
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Ac 
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A:^i P^^'ryY(Dmm7t\ P 7 FUXtcMt- ^fiiSi 
g*^HulBffi'9$3Ht^{if^iSfct-*^S:6HCJSi;T. ^iSA 
:ti I Pv'^^^y b<0^3!l5ti:bTHtjlSrta5^--y h 7-^*5 

[li*3S6 2] 

70 =i>tra.-^ic. rtrfP^^^y hy-^irJI^rf^t'^^y h7-^ 
o^^tciae^ nfc*3 i: *P ^S^^ T T ^ 
-;l/SS^*^T ^ /c feO y n A t:: :lo 1/ . 

A:^ii P7w-jh<o^-j^'mn^^xsmt^y^)\y'^') 

§S^n/'cA:6l P/^^^-y hO^'yt$^1f^*5J:r5H9fB 
20 5t^LTBufBrtgP^-^y hV-^*5cfctfBuIB*5i:*:)SPC) 

^ -^t- ti' X y p -tr X ^^tT ^ ^ c ^ Ti3^:^tO^/ 

tctt^i^r. ^iSA^'j I p^'^^-y bt^*tJS-r^7^;i/^ 
30 t(om.mmm^nrc^to'^m^m\^^rcyT<T^:^ 

xoillSS^ffiJtb. 

A:^I P/^^^y hOiMilTt:! P r H UXtc^r^fM^ 
Ji£;b^ftOnB^S*:) ^It^f^^riS/c-TTb^SJbHCft.bT. ^fiSA 

iitSIP:SW>^X-rAco*5^ t)^Stc45C^T; 

-9— lixyp-feXO'^t7tc*5i/'^T. ^>^<^t>^-^yh 
y-^Aati. yr^JlXti^ti. *5cfcO\ ya-tx^iic 

t5IB^ > F IBIt^^lS f Bit , ^ n /c -O' h OS m 
50 CH*aR316 5] 
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i^XxAo 
CISAlt3l7 2] 

iPLfc;l'-;btcL/'c?b^oT. HUfe-9--lfX-/a-feXO* 

mimi 3] 

m^tr^m^mi 1 ^^:^BilsoIjts?pr#^>'X'rAo 

[IS*3I7 4] 

m^mi 5] 

tuf By r T ^ - ^U^H 4o u ^ r . 

n;^^ n^moikmnw -> x x Ao 

^0 [||*J17 6] 

MIBrta^:?^'^ hy-^7±O-9-->'^3b^e>HtJfB*3^0^S^ 
{i.^ ^ < h ^ 7 r X ^?fi'9*r ^ ^ ^ — U 

|1jlB:rd^D^MT'iS^SI*^<^a^n^^. HuIB^-^-U 

^W^h-r^in^^ 6 8IB®cOi3cm'(®>'X-rAc 
CISdtlB7 7] 

50 -9— tfxya-trX^^ft^H±55::^3^^)x ^>^<i:^^^*:' 
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[|i*iM8 0] 

K ^ >*J*t) ^ fc ^ y*JSt1]^*«J^-r ^ichfcO. 

mo 

[|t*«8l] 

5itrR7 8 ^/c(i 7 9 tcissgcoijtll1^.ai:^ffio 
[ni5*3Ji8 2] 

n /c 7 7 7 - v't'^B to ^ 4o ^ 0 ffl V ^ fc 

rMBfei:0^fllc1if.3ll^nfcA:^ I P/^^^v htcJ^TT 
^ ^t- If X T'n 4z X ^*fTt* ^ c ^ triJc^CD W^S^ t^JP 
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-fiSfiSST^— y /I/O ^ ^ icy h U CO^ Att-r"— ^ 

Buie{i^SSilx-:^;i/rttCHtiiSA:/D i P^^^^v l-t- 

JO mm\^^^ 

X7^'yy^Y^-r^^^^^tf®i:*^^MriStipi8 2t/tti 

8 3 izi^m(oi$i,mmmyjrio 
[Ii*ii8 6] 

^ /c 46 y n ^' ^ Zx tc to V ^ T . 

-It- exyD-tX^*S^-ii:^3b^^> '^^3&< h^t-^^y 

[|fi*Ii8 7 3 

JiSgK8ilS/X-ri^Oij^«<$ftI^*^T^ 

■ii: ^ /J: i6<D y n A le: 4o T . 

[11*118 8] 

/c 46 7" a ^* ^ A I c 4o 1/ ^ T s 
^.r7->^;^^tii:^^i:. 7 T-i';UAtB:^ii:. :/n3-fexllEM 

50 ^-<Vh^^C0@^Mt%^^HftLTU>'^{^ttb. 



-9- 



17 

7.^y zT^mt ^ct ^Vfm tt^ imm^'f^ 

[ifi*^8 9] 
[^?l«Ii^9 0] 

mine A^3 I P / ^y h ^ ^ ^ SS^-r- :^ ^ . ii'i ^2 

X X >y y -r ^ c i: ^nwi t t^m^m s 9 m&(o 
mMm9 1] 



10) !|f 2 0 0 4 " 3 0 4 7 5 2 

18 

xx^y y^^^f ^ c ^^^^a^T^ii*^ 8 9^ /-ct* 
[n?^^*iil9 3] 

n/'c^fcSRefa X -r A tC :|ol. . 

tg3l^^n/'cX-< *y ^SSS^. 

BaiBX'Y*y^^eA^6fK^^n/'cA:'D I P^^^^y h 
tc^-r ^ 1: X y n -t X ^^tTf S c i: TiAL^O^T^ 

. Hafax>i''y^^sti. . 

iiuHB:7T^T^:t--;b^iaTS:illl^nfcA:^i 1 P^^ 
>>-'y h£0-N*y^*1ff84oJ:t/J10 53HJ^f^tcS-z5l'iT. ^ 

iSA±i I p>'^^^y Y<Dm&9t}i\^xmt^u%y yy— 
20 tR^e^. 

Vi:^ISA:/al P/^^*y hcOT Fl/Xit^^te:^JSL/t 

30 V >^'^<^tcSoi.^T. ^ISA::'D I P^Wy h^^Jlf 
c h ^ ijiSKP X X Ac 

CiSARIg9 4] 

x«D(iiiS^Wiirs/ci6<ofi^jS[WJi¥S^^L. . 

^ I P T H l^Xtc«-r ^m«ilii:^n5nSfB«iJi^i3^I!il^^ 

t^mmtr^nmm 9 .3 netKE<oii^!PKffli'>;^7^Ac 

[iljRri9 5] 

HUfS7 T-iT^^i^ — ;b^a^cfc t/gfJlBX-f *y ^^fili 
ffifccDij^^KSiaJv'XT-Ao 

[iiAjtii9 6] 

n /c X 7" A io V ^ T . 

50 trltBrtSP^t-y h7-^rtt?)#^0-9'-/^^Btc5ljr>"r 
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[fi^WG 7] 

< t^iScl^Tr; I P T K V:^1c5Xmk^% 1 P T K UX^ 

HufS7 7 Z ^ ^ —^l/^Mt^s 
A:/j I P^^'r-^ hco-\^y!^1f$64ocfcLfliD^Ht^mc 



(11) 4tf^2 00 4-3 0 4 7 5 2 

ijijBBS^-*;^ >y-b— 5/^3M{iL. ^OlS^i: X^XmmXIl 

{^^rSZ-c-rA^S^^jHcjECT^ISA:^ I P>'^^'y V(omk 

m^mi 0 0] 

n/c tSi 5/ A 7" A :fe ^ ij^ :»S?Rft'(ffl73 ^ t^: ^ t > r . 

20 I P^^y^y h^A^T^^. ^ISA:^ i P/^^^y 

Cif 10 11 

n iJi m SiJ A X A ^ ijc S p^iS 7? r£ tc *5 V > T s 
HfflBrta5:t^'y hV-^4Dj:tJFfiufBi1'SI5:^-'y hU-^(0 

4oJ:m3^ll5t I P7 FUA^^tyT^-htc^i^f^/ 
[aS«^i0 2] 

I P^^^-y h^Xtir^t. m^Xti I P^^^^y 

A X ^y y ^ ^-r ^ c ^itssi tt^^k^mm-f^^*'^ 

50 [li*3Sl0 3] 
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tulBrt gP^-^ b y - ^ 4o J: rsmm^^- -y h 7 - O 
Ac 

[ii*iaio4] 

A ^ C 1 1 ^ I3t 'J?^ 7d t - ^3 1 ^ T . 

^^>i^ty/t^^^^*y-t-5/WJSB>'r-i'T'i7:t-;l/S 
[ni^^«iiU0 53 

BufB T T ^ ;t -;b^Bti. HuiBiSS^p< -t- v^t^:^ 

U T . nunBA:^} I V^<^J-yh (Om^^ tLX fianBrt 
^y h7-^4ocfct/MIBt5^!5aiSOi/^'rn:6-^jlitR-r 

itmmi 0 6] 

Atc43tt^Si)fBii$lttWJl^-^^^:=»VlfrL-^tC^^ 
tuiB7T-i'T'^;t-;i'^S:5^bA;^ I P^^^-y 

^^n^x-^?b-e)BiiiBA:t» I p/^y-y hircMf^mm 

fiuBB{iSi/i£^^^"^ < t *>l!rO)S^7< ^y-b->^%iJunB7 

r 7 -;i/^B^3Ifi-r ^ . 

MStiru 0 7] 
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to^i^m^mM-^n. '>^< ^t7T-r7'^*— ;USH 

<i«ia[gait-~>' ^ t ^ ^ ^ /c ijj X -r A 

•r ^ /c a6<0 ^'5 A :fo I . 

3<>^ *y "fe— v^^b3IB7 r^T^y^ —jimSf)^ ^ fifllB^l^ 

milBM^I^ -y -t v^frc^ ^ X- ^ e> ^ n/c 

iiunBi^.^p^ 'y-b-->^ict^$n^{Sgiiffi*'^p;TAEojiti 

c0^3ll$fei:bTmlHBrtgP:t>^y h 7-^*3j:t5HaiB*5i: D 
A. 

[00 0 1] 

^^SHJ^tirivtrjx-^^^^y h7 — ^tc^oCt^-tr^ii U 

L T rtSP^^ ^y h 7 - ±<?:)^ilS^«iit" S 
A:foc):t/7^?*tC^-r^o 

[0 0 0 2] 

ii.g|5^.^y h7-^:b^et?DlfcSgtC?^r^[»tSIttffi 
tLX. (1) 77-^7^:^-;^ (2) ^lA*^^ai/7N 

T-A. (3) *5i:D>^X7"A. iii^o/ii^ri/j^fe-Qfco 

[0 0 0 3] 

io 6 4 2^i^#B (l^i^Sci^i) ^^:rJ^1^^^nTv-^o i'l^gp^?) 

I PJt^^y h7-^i:rtgl5<?)-i'— ^t:^^y h (^SiSIl) ^ 

o:>m^ tc 7 r 7 7 ^ - ;b ^ iiW b . It ilt ^^^^ i: ^ ^ ^ 
>>-^y h^n^^--J b7-^7b^brtgI5^'^'y hy— ^tcilil 

tc/^^^y h7-<;Ul5?^iatt. /^^-y bO-N^y ^'tf$S (iM 
ffi7t7 K UX'^3llfB?c7 K bX) ^ E(Om. h 
OaSU (TCP/UDP/HTTPJ&H) ^rt 

rj^^nXl^^We bit'->'^^iftc3^LT7— A^^^^ 
O^IE^>^^^? F3b^jl!iA'r^Ci:^j£BTT-^§o 
[0 0 0 4] 

^A^tSlv'X-rAcO— ifiJCi:. rctKir£^?M2 0 0 1- 
3 5 0 6 7 8 5!^^^^ (!hmXiSK2) icUW^s^nXh-^o^ 
c:co?;^5feO{tA1ta]^>XxA{i^iE^iAW^>^^->^^^^T 

WWW-9-— >'^ffl^IE(lA^"J^^t'-/^-*^M A I L+f— /^ffl 

^IE{gA^-U/ul;^->'^^fcUTi/^^o ^-r. I PTVl^T. 
50 ^-yjl^WM^t. rta5;7^'y F7-:J7±^?5Sn^/^^^y 
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[0 0 0 5] 

^oi:!?'^^^"^^^!^*^. /cfc^ti'!ttr^12 0 0 0- 
2 6 1 4 8 3-^l.^?S a*S^^lSX3) ICliH^^^nrt^^o 

J^^^L. ^fefc^JE/^-ir^y h^5Mff Lfc^^X h-N[^lt 
[00 0 6] 

*3^t)^/X7=-AC0^2{^iJti. /ch^Ci'1$r?i2 0 0 2- 

hy-^ (^>^-;T^^yh) tico^Wic. 
h'^x^^LT. :^IE^^.aJ+^-^^^. ^5i:0•^t-/^^. 

S^^f'J^il^n/c^-^^^y htcti:. -^-Olt^^vT^^^^v:^"^ 

$S5aFJ^t->'^^^iE>'^'ir'y h^^^teiSif^^®^. ^46tff:*S 

-^5'C0S'5)>^^'!r^y h^SflL/c^Jcti. ^etc^i:t)it 
w^^SnS>''?'y^y h:&iliEjM-r§J:5tcbT*5<o ^/^-Tti 
lc-li:J:. ^iE*^m-9— ^^Tl^m^^ifc^IE/^'y'y hti. 

>'^TMi. ^^0|t^^^^y'y h^^fiScL. ^iEz-^-^-y b<?3jM 
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[0 0 0 7] 

09-22405 3^i>ia (#i^:sciSX5) iciae^^ tiT 

(^>:5?-^^-y h) y^-Y-^-h^-^-y — ^ (1^ 

J:tF<^fT^>'y hy-:5^^fii^^o X-i^ U-> • i^X-r A 
(i. S^tctgS^^n^S-^T-^^y hy-^:b-60S{l/^^>y 
hlcoi-T. /^^^y hO-N'y^'le:fiBili!c^ti^ffi$S^Sgfi 
MS^5:i:Sli:L/'cX^U->S2Ptc'(«i,\ ^^^l/iJ^Uv 
^•^tT^o fztlX.. X^U-> • v'XxAOilfi-rvi^r 
yx — XCi I PT Kl/X^^fc^". trace rout 

■Q^-r^o ^,-5 locDiif^hLT. :/^-r-^-h^-^y h 

tcti 0^W±<O{<-tT^i>X h:6^i9:Cten. ^-^-f h ^-^ 
-y h ^±ic^;&.-^x hOf-^Pl!^ UTifti^^-^^ c h 

[0 0 0 8] 

[T^^n^:^iM 1 ] 8- 4 4 6 4 2 immm''^ 

0 0 2 9 — 0 0 3 0> US) 

[J|t¥F5:S«2] 4trjf^2 0 0 1 - 3 5 0 6 7 (IS 
5^- 0062 — 0084. mi) 

im^:iim3^ o o 0-2 6 1 4 s s^'j^m (s 
^#^0 0 2 4 — 0 0 3 0. mi) 

4 ] mi^ 2002-7234 (fsss^^ 
JO ^0036 — 0040. mi. 1112) 

[ItfF^fiRS] !t^P^¥0 9-2 2 4 0 5 3^^$g 
#5^0 037 — 0043. 0066 — 0067. M 

6) o 

[f^B^O^f^^O 

[fgB^A^^T^L*^ 3 ^-r ^is^] 

[0 0 0 9] 

[0 0 10] 

^ 1 oPu^SiSti. nm^-y h y~i7±oiX^^^x h t 

I^a5;^>y hV-^±0-9— /^^^DPalT. SSL (Sec 
u r e Socket. 1. a y e r ) I P S e c ( R 

F c 2 4 0 1 letg) ^Ht7)afigs0g^{i:i5?t5:^=^^v^bn 

[0 0 1 1 ] 
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[0 0 12] 

[0 0 13] 

[0 0 14] 
[0 0 15] 

b3ietc{^^;?ti/c-9-yt^X'rA:6'«^^E-r^il'a'-»^. - 
SSM3S:+^— /^Sfcti^yt^X-rATSoT^ia^tC^fii 

[0 0 16] 

m4<D?Wj^M. •r-tJf-^-X-^yv^y'-f'V^v^a- 
;l/^HO-^ty>'XxAJ^(i^^^t->'^>'X-rAtc:fel'^ 

x#ifWS25iz^nTi/^^^-& (■r^^-e»xx-h>';i/'/ 
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[0 0 17] 

*f£B^Og6^ti. ilfiSSBg^^tSffi^ffll/^/'cilfiv'X 
|5^'#T'# ^lA^P^'^v'Xx A^oc^O'Tiii^ e»Lf tC7 Z-^ 

r -;i/SM^S«'r ^ c ^ 
Co 0 1 8] 

[0 0 19] 

c ^ ^ ^ o 
[0 0 2 0] 

20 7^7:4- -;l/^H^^mjiS?l?SfflI>'XxA;^)^|^gP^-^^y h 
y>y htcMt-^^t-lfXT'n-feX^^ltT-r^cirT'ifciS? 

;i)3b^S*^^¥iJ^'r^>'^^'y h'7-Y;l/^U>'y^Si:s S 
il^n/tXt) I P^^'r-j bO^'yi$^1S$S43J:t>'ffiD»frt 

^f^tcS":5(.>T^nSA:':i i P^^^^y vco^m^th LTiju 

A±i I P/^-^-'y htcl^JLTijuteii^S^^^O^IS^b^'iSf^^^ 
a3L/c:*^S;bncS':5i^T^ISA:d I P/^^-y ht-J^lSf 

^y^}\^^') z/^^^i^^mm-r^y ^ju^v z^ifm^m 

Co 0 2 1] 

±1 I P^^^-y hcomimTzl PTKlxXtcM-r^fiJ^^^ 

mm^^'tk'^r ^ct t-r^o 

Co 0 2 2] 

50 y^'mmo^tfy^jiy^'J^^^^i^i^M-r^^'X. ^KA 



-14- 



27 

mM^n^t. mmxti] p^^'r-yhicnr^'^-y^x 
^oL. mmxtii p j^^y hizmi.xim^^^i^rct- 
[0 0 2 3] 

i^^xm^XtJ T P/^^^y b(7DteaM^fe^ LTlCffBrtSP^^^y 
h y - ^ J: thTiUfiBto ^ ^ ^iS^ V- t^ni^^^oliH-r ^ !^^^ 

fiTci PTFuxcDii^i^^sa-r^/'c46ofi3sasii 

i^i;i:TSiSA;b i P/^^^y hoiEiMJt^^Sf^ii 

[00 2 4] 

^y-^^b^^e^^n^ST'D'fex^^r^tiiov^T. tcon^ 

[0 0 2 5] 

fi. +f~>'^'Lb<Ci'=e(^)1fyv^Xx/x^Oii!^^^^1?i 
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oij^s^i^ttfs^ t ^mi^ b T tssrt-r 5 / N -y ^ ^ W^SSP 
y-i/H ^^-r-^J^^attlb. ^J0^B^^•y>':x^1i=5yl^^P^c^^ 

nB:fot D^l^t73i^-rn^\ ^/c:ti^<073^73^^nSA:^J I 
P/^^-y h(3[)e32i5t^bTSfi^-r^te5M5fe5MtR^S^. 
;^Wb. HfffBK5^5tS»^^Sti^ /N^yi/ii^giimc^s 

tt^7yu^->'3>'T'-^^^SSSM'^. giiTb^^o 

bT. ^iS:6^^v^tl^^ b < (i:j®Stcife^i: bT^«S3^ 
[0 0 2 6] 

^t)^^X^^&^tt. 77 7'-Y7'^7;i--;l/^Sti. 43^0 
20 ^Jt^fUO^TT^ilb. A;^ I P>^^'>-^y Y\znT^\m 

[0 0 2 7] 

< 1 OOii^Sii^as/Xx/.^Wb. 7 7^7'^^- 
;l/^Sti> ^>^< l":::>(?:)ii^S«ISlVX7^A:^^?>ij^® 
1$^7^'-K^§{Sb. ^>^< ^^liC^Tt:! P7FUX 
30 fci:t;ii^^5tl P7Fb'X^$€y7^— Mi:^^'r^7 

[0 0 2 8] 

:*:f60^O^7(?:>miSicJ:ntfs 7 r '<7'^:a--;HSB 

^^b. yr^T^y>c-)\ymm\tX-h\ P^^^yV 
t b < SPO-r— ^^^Cy2^d<^ ^y -tr— S/^fiOnB 

fi^14Sa-9-->'^^3M<i-b. ^'^(i^ SuiB 

g^R^ ^y-fe-v^lClSbT. ^f^S*;^ *y-fe-'>lc^Sn 
;5T^'-^^^biiunBA;b i P/^-^r^y F^c^^-r^mm^* 
40 ^b. HulB«^JS[^^>^< ^t>^CyJSS/^y-tr-i^'^Su 
fB7 T-<7^ c ^^J^FUj^-r §c 

-N^y^''«fS^J:t531*:)^Ht^f^tcS-::>v^r. ^ISA;^.I 
P/^^^y FO$E3^5t^bTrtgi5^^^y F'7-i7^'i:t/:fe^ 

^ 1 1 -D(Dmm^kmm^-^'^&mnn brs^^ ^y -t- 

v^^^ftb. •=eojS^i:bTA;^J I P^^^-y h^?:><i^ig 
50 bTSaSA:^3 1 P/-<^^y vmi.m^t^x^t'^-t^^h^n 
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n/c^LT*^. ^>^<^^I P^^y ^Ic^Siffi^nfcV- 
XI P7KUXt L<ti-x^X-r'<^^— >'3 VI PTF 

[0 0 3 0] 

*5 ^ 0 ^B-^^oiSil:6'?4 :^^^>^v v^^ ;^fiic Lfc 

[00 3 1] 
[0 0 3 2] 

7 7 7 ;t -^b^is 1 jbwii^ nri^^o -j v 

7-^4Ci. www (World-Wide Web) ^ifcO+f-lfX 
^ism-rs 1 {lW±co-9--/^^e4 0 1 J&^tyo C CT 
V 3 ^^:I5tS?5t5^x h 3 0 i -b^Sl^riX 

[0 0 3 3] 

7T-i'7^:t-;i/SiSi ti. m\mi£Mi(Of^'r-j vx 

JDL. i3(^^3|taiL/'ciiB'tcti:7^-- h^7T-^'7'>:^- 
-;l/^S 1 ^tB;'a-r^o ^/-c. :^iE^^>!r^y hicj^f 
tOJS^v'^^'y h^^fi)tbr7 7-f 7'j7^— ^U^^ 1 -^ig 
LT*>J:i/^o 7 7'^7'^:^--;V^!i^ 1 t±^cot>&cDi^:^^/^ 
-ir^y h^^iE>'^^^y hOiMfiTiiT'fe^iiSgTt^i-^X h 3 0 
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[0 0 3 4] 

(iO 1 '^mwm 

1 . 1 ) ISfig 

^7r>:^^u-j^mx^^^ 7 7-r7'>:t— 1 (i. 
i'l*spafi-r>^:7x— X 1 0 ox^i^^—^-v v 3 iifS 
8!$n> Ml corta^aifi^v^yx-xi 0 4TrtgP^'^ 
/o -y hy-^ 4 ^jsrc^n^o 

[0 0 3 5] 

/^^*y by^;i^^ 1 0 Hi. i^i'giJafi'i'v^y x-x 

1 0 0 43j:t;itg5i|igi5i 0 3oi^otcjsrc^n. 7^-hxniy 

SiUXhWaSM 0 2:«)>8?Xttb/c7^-b:X^jail;l/-;t' 

^yx~Xl 0 0*3j:Ulga»gPl 0 3 0-:^:6>eSttlX 

20 [0 0 3 6] 

^'^^ir^y hy^J\^^ 1 0 1 T'S^^tlfc/^^^y btilS^ 
a5 10 3^3Men. 1 0 3 Ci:. ^t^T^III^UX 

h (iHS) /^^-y by 1 0 liy^^bXti 

Lfcl P/^^^y hO^Tfel P7FbXtcjSi::T^IS>'^^ 
-y bJ&miOF«ggPjlfi-r>^yx-X l O 4:?d<J:0'^2 
tDl^riPiilj{i-l'>':$?:7x— X 1 0 GCDi-^-fnt^^m^T 

MlC0rta5il<i>Y>^7x~Xl 0 4^/c^ 
M2tOrtgPil{i-Y V^7x— X 1 0 5A^^-Y>':5?— ^>^y 
h 3ic\^t>^'? 1 P/^^^y h^/^^^y h^-Y^b^ 1 0 Uc 
iO IsiMT^o 
[0 0 3 7] 

£R 1 (Orti^Pimm-Yv^y X— X 1 0 4 It. pJl^r^P 1 0 

3 3b>^A;^L/c: I P.'^^^y h^rtSfS^-^y h V — ^ 4tc{i 
iib. rtgp;ts-y hy-"^ 43b^^-r>^— ^--y h 3le:[q]:?)^ 
-5 I P^'^^^y h^SI*SPl OS^eii-r^o f^2(D[^^^ 
ilSfS-YV^^x— X 1 0 5(i. 0 StCctoTliJl 

#^n/tl P/^>>-^y h^to^ t)^M2tceilL. iSt^D 

1 0 3 IC&M'^^o 
40 [0 0 3 8] 

2 t^^tSo ^u^-j^Z 0 1 WWW^T e 1 n e 

t r^E(0^--j hy-^-9— tfX^Jit^-r^y'D-bX^^ 
ffL^Tb^^. ^My'D-tXtO:|:^S£^i3{ie<^^Pa52 0 2^ 
laiHjeiBr^o Ijt^*^aiS5 2 O 2ti:. yn-tr>y^2 0 1 
7b^bA±J^n^yn-bXt^rR^lStIU^&7b^^. iSi^OW 

50 [0 0 3 9] 
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[0 0 4 01 

x-^^'^-X 1 0 2 K It^SP 1 0 2 2*5<fctfMSTJaS 
1 0 2 Hi. < ^ ry-x I P 7 F UXJ . Tr" 

0 2 2ti. /^>!r*;; h:7^;L/^ \ Olt^^l PTFUX^fe 
^^^Cy|]av^^t)-^i: (RQ) ^§:tt^i:. r^-txflnj^ 
UXhx-'^-^-X 10 2 1 /3^^^jS;'r^T^4zx$« 
;l/-;l/^>tt^bT/^y'^ h:7^;l/^ 1 0 1 'n^S-To Mfr 

sa^yijB 1 0 2 3 \ o 7 f^^^xt) l 

fcMSrffl 7 ^ -fe x$iJ1Si;b-;i/t^:?;¥ ^ T T -fe xMISi U x 
hx— X 10 2 1 OrtS^MSr (jgjIJD/KgjE) "T 

So 

[0 0 4 1 ] 

!114{i. Z^-txaaUUX h-r-tJ^-^-X 1 0 2 1 
X 10 2 1 lzmil$^(DT ^ "^TsU^Jl^—^^^ti^Pfi'nL 

(omwm'if^'^T^m-^n^o ^T^-tx^j^^u-^^ei. 
|g!4^c?^-r<fc^^^:. v-xi pthux (src) 
^T^T-^^^-iysyi pr Fux (D s T) r^Eo:i)\,- 

jVM-^m^h. ^^'r-jV<D^m (ACCEPT) . ffiS 
(DENY) . mm (DROP) r^E(Ofn'^<D^m^tt 
(PROG) ^7nrmyA^li(Omti'^-^^^o T^-trXM 

•feXMtSUX h-r-iJ?--^— X 10 2 1 T«}f UT4o<o 
m 4 tC:fol,^T. 7X^yX^ (*) (iffi^.tDTFbX^ 
^L. Vy ^ "ACCEPT" ti/^^ 

FO§Jl> "DENY" itl CMPX-^— iiai^TS 
>^^'y'y M§S> "DROP" I CMPX^— iijp^b 

[0 0 4 2] 

El 5 ti. fs^gp 1 0 3 \z.wL^^^nfcmm') x h(o-m 

**fiS(?y«0Bl3SUXFTni. rtSPit'^'y F7-<> 4(D*(^ 
JUT \>T YXyTstm^-^nxy^^^o tta2'rSJ:^tC. tI^ 

(ifflTfesii-ro I pz Fi/x^^5fe^-rs>'^^'y F 

ti. hT'feSRf 6^14:^1^1/^0 

[0 0 4 3] 

H 6 ti. IS6'#;l'-;l/¥iJJi!SHS l 0 7 {zm^s'^nxx.^^m 
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32 

?^ai-rS7b\ l5Sffli;l/-;l'¥iJ^a5 1 out. Si* (RECO 
N) , SA (INTRUSION). fiKig(DESTRUCTION) ^Srif OijCiS 

1 5* 1 ti(t:^t^l^^r\ 1 r::)cD7'^'txS«r^;b-;bcoSt 

intrusion: (SRC:$ {S0URCE_ 
IP_ADDRESS} . DST:*. PR0C:DR 
OP) 

So ^0:>%^'&(Do-h r$ {SOURCE_I .P_ADD 

REss) J (o^^tK 'ik^t^x^\^. ^h^mmz 
XI PTFux) TM^B5^e>nsEis-efcSo 

[0 0 4 4] 

1 . 2) lOfif^ 

1.2.1) ^^^-y F7^;l/^U>^' 

I17li. *f|0^cO^l*itiJg^lc<fcSiSc»ISS?S^Xx 

20 "^it— ;l/^H nc^ol/^T. -r^^"-:?-*-/ F 3;b^^>rtg|5:t'^ 
Fy-^ 4--^fp]tt/c I P ^'^^^ *y F ^^^i-SPMil-Y 7? 
x-X 1 0 0TiS^/-dg. ^I^I P/^>^^y F^/^^^y F 
y^^Vi^? 1 0 1 -^HtojM-rS iT.T-y-fk 1 ) o 
[0 0 4 5] 

:>:tc. /^>>-'y 0 ni, ^iSi P/^^-y F 

(D-\'y ^^#ESL. -^CtciriBilS^nTl/^S V— X I PT 
FPX'^-r-1'XX'i' ^-^^ v'H > I PT FUX^&^CDlffS 

;&7^-fex$ijwuxFggia5i 0 2-\m:^-rso 

30 fcl PTV\y7.^m\^^XT^'^:^mmV7.h'T-^^- 

xio2i^i^^L. \iyh{.rcmm(or^'txmmj\y 

— ;l/^/^^'y F:7^;U^ i 0 i ^igfo T^^-trXJlOT;!/ 

S (X-r^y'/A2) o I P^^y^y F^Sr^SL/ctl^ti. 
^fiSl P/^^^y F^n^^ftPl 0 3-^fe^^L. mMl^tc^i 
^(i. iS-^lc^^O/^^^y FOSaS^^SW^J^To 
[00 4 6] 

T^-trXlliyfliUXFIMilfin 0 2lc4ottST<:7-tXl|fiJ 
./o ®;b-;KO«l^tJ:43i/^T. >^-^^^y F7^;U^ l 0 1 3^)^^ 
X:/dL/'cV-X I PTKl^X^l^^asi 0 2 2*^SttfX 

jg,^^ 0 2 2tifl^i^C)r^-txfl/irfai;u-;bi?:)S 

^^ffi:A:/3L/cV-X I P7FUX^^?s^L. ®^ 

^{^^js/c-ret^^Dz^-fexsijffljyu-^u^ftSffiL^ >'^^ 

^y F7>f ^U^J' 1 0 1 ^jiTo 
[0 0 4 7] 

1.2,2) ^^"ry hmm 

fgjfgPl 0 3Tni. /^^^y F7-<ybi? 1 0 1 T' 

^iiil^n/cl P/^y>y Flc>[tLr. ^fOT'VXx^^-^— 
50 i^HVI P7 FLxXhi=^a6iatt8n/cil§2gUX F^^# 
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mL. mm-r^^p^^^is^ >^y Ji-T. (i o 4fes . 

VMi 1 0 5) ^ikmr^ (x-r^yyA 3) o Mi^mc 

tcti. mzo^p^^mm-o^y s.-:^ i o 5^:m.T^ 

[0 0 4 8] 
[0 0 4 9] 

yUSMl ;^^^8{£ii^n/c I P/^^-yh^. ^(O'f^T.'r 
^^^-'>3Vl P7FUX<?3iiP{Rl^F^^r> ^ft-r^c 

F UX^fiJ !9 S T e cJ: -5 ^X^^ffiH LT ^> J: v> 

XE^^fPl 0 3 l^{)iu^T43^. 1 P/^^-yhOx 
^X-r-r^^-S^aV I PTFL/X;^4b'^D^M2C0 1 P 
TFbXtc:S#}^^/'c±T% :foi:0^H2li:SI£l P^^ 
^ y F^eiat*^ct;9^:^S^iHv^T*><J:i^o 
[0 0 5 0] 

1. 2. 3) exfflet 

X^LT. WWW-»^Te 1 n e t if 1 -c:>i;^±iOffiB^O 

0!l^(fs T e 1 n e t it-lf XtO«^T**n 

tf. Login/Password T'n >'y h ^cDtt .^t 

[0 0 5 1] 

1 . 2 . 4 ) 

'y-9-2 0 \t--^m^^^\'^%Mmil\^r>\.^X. lE^Kf'F 
A 6) o iE^li!jf^SS^fi> *5^'?»§2±T}jim^n 

^-*t-exoiELi/^}i^'!^i/Mc|jy-r^^{^toia'&-e^^o 
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■9— If X tCj^^S-r S r n -t X S e> ffiO-y— V ^SBIC ^t-: 
^y hy— ^T^-tX^f ^i^^ck3^^ 
f^"^> r/usr/local /www/ logs -r-^ 

«J:^;Q:^ftjQ:if<?:)«^T*^S (i¥L < li. IS 1 2 # 
[0 0 5 2] 

^-jV^mi^'&knt^ (X-r*y:/A7) o 
[0 0 5 3] 

/^^y ^ FZ^il 
20 • rjfeiiJ :Ping Of Deat h ^^CDI^- 
ex^&lijfS? 

WlEbT;j55Cttf<J:V^o f?iJx.li\ hUIBL/c: r/u s r/1 
o c a 1 /www/ 1 o g s 't'V F UU$i^tc:7r-f 

\^^\Z'Z>\.-^X\t. ^^'y ^ FZ^E<OpJ^145b^]Bv^OT:\ 

[0 0 5 4] 

30 1.2. 5) 7^-lzX©JSPUXFC0Mrr 

;l/^fflv>TT^-feXW®;l/-;U^^^L. T^-teXM 
ux hB?!^ 1 0 2^^i^z^"irx§y?aiJ;u— ;i/^3iJjD"r 

^cfc^JS^-r^ (X-r'y:/A8) o 
[0 0 5 5] 

)JiJCl"^^t-> Il6CO<t-5^f5^?S];b-;bX^U7'h^n5'AiIL 
T*3<o lS5®;b->^^X^UyFtcti:. |116cOJ:9^SiS 
iCcfcoT. i3cSflgiJ^Mrr-r-<^T^-feX*»Jffli;U-;U<D 
ur^mhco^^W&'t^o r^-trxar(»>'l/-;t'iOOJS:^J 

(SRC:$ <SOURCE_I P_ADDP E S 
S} . DST:1, 2, 3. 4.PR0C:DR0P) 

^KizE^nru^^sti-a-. r$ {source_ip_a 
DDRESs} J (ommt. r^-FfrClBK^n/tV- 

X I PT FUXTfiSB^^n. 
50 (SRC:12. 34. 56. 78. DST:i. 
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2. 3. 4. P ROC : DROP) 

u X h w^^^ 1 0 2 rt^DMSriaagp 1023 ^&m^ 
7^-fe7.SiJ®iUXh-r-^^-x 1021 

^.-^/avi PTKi^:^^DJ§^^o7^-t!X^ijffli;i/-;^ 
jbWcT^-feXfSir^UX hx-^-^-X 10 2 1 tcMH 

7^-tzX$iJSilUX hf^— ^5?^— X 10 2 1 ^M?>ff-r^o 
r^-bX*J®UXhx-i5f^-Xl 0 2 lO 

[0 0 5 6] 

1. 3) ^^m 

UX^LT. [^gP;^^y h^-^4lC:}ot5-S*<Iffii0 1 P 

7 F UXI!¥^BBi|Oc-r ^ ^ T\ 1 ^0*5 h D ^iH 2 T% 

rtas^^ h 7 - ^ 4 ±\rcim<D^ to mm 2 ^mmr^ 

[0 0 5 7] 

il^. rCodeRedJ-^rNinidaJ ^E(0^ 
(OE.l&tf^^'yZy^'L^i^c I P 7 HlxX:&2gJRL^:6'^^>. i-S 

nmmmvit. m 5 jc^-r j: ^ ^mm x f of^^r*^ 

(Dlcm^m ^ C i: *^T'# So 
[0 0 5 8] 

-XI ooizmo^r^nrc i P7Fbx^fi?i#uxh 

[0 0 5 9] 

1.4) ^wm 

[0 0 6 0] 

1-301 (IP7FUX:1 2. 3 4. 5 6. 7 8) 
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36 

rta5:7.'v F V— ^ 4±tc-r>^$'— ^-^^y F-*?-— >'^^ 

S4 0 1 *^»0^><0^-r§o ^?>JC. -f>^—^^-^h3 
t\Hf^^-y FV— ^ 4 ^i7:)ifdWti:7 7'-r7'>^-;l/^!S 
l7b^l5M^n. #.2pM=&>i<-FS^T$>^T C P 8 0# 
/f^- F tc43U^T WWW-9— ex^Hflt-r t) SB 2 

4(D^^*y FV-^7FUX^LT. Ti. 2. 3. x/ 
2 4 J ?b^fflW^6nTi3t). -9— >'^SS4 0 1 tc« ri . 
2. 3. 4J I P7FUX*^S:^^nTl^^t^0 

[006 1 ] 

^fcKjcJhXF 3 0 1 (iWWW-9— lfXtcJ*-r§i 

ri. 2, 3. x/2 4J tcSl>^^*. :6^ori. 
2. 3. 1 J ^^ifil cD^SI^fti:UTil»^b/c^O^'r 

CCr)^#. lS[S7t:4-^XF3 0 l;b^^I^gl5:7'^^y Fy- 
;7 4tCjq3ttT. SYN/^^^yF (V-XIP7FbX: 
\ 2. 3 4. 5 6. 7 8. T^^X-r-r^T-— i^a >1 P7 
20 FI/X: 1. 2. 3. 1) :6^jMfi^n^o 
[0 0 6 2] 

^MS YN/^>:r^y Fti. ^-T. 7 7 7 ^ :t — 
1 c051^;^Pjinfi-f' X— X 1 O Otc5iMLfc^t> ^c/c 

•t,tc/^^^y hy^ji^^ 1 0 1 tc^E^i^n^o ^^^-y hy 

^Ji^^ I 0 Wit. 7^-bXSiJSiUXFgIia5 1 0 21C 

StfLT. 'prj:< t^^mSYN/<^y FOV-X I P7 
Fl/Xri 2. 3 4. 5 6. 7 8J ^t'^X'T^^''— v' 
3^1 P7KlxX ri, 2. 3. IJ t^lbilT^o C 
(Oi\h. 7^-tx;iiW;b-;l/0©Jt^i^ii6^/ci6tc. 
50 Fn;l/#-^ rej (T c p^:^-r) ^d^-FS-^ r8 

td:{^!li:brV— X T P7 FU'X^xVXt^^:?'^— v'H V 

I P7 Fi^xfctt^A:ti'r^€3 0^r^o 

[0 0 6 3] 

7^'trX$»J8|IUXFWiia5l 0 2lC:fott^7iJ7-feXSiJ 
^UXFt^^-^^— X 1 0 2 U±. {?iJAti\ ll4CD<fc'5 
75: X F JB^TiBiiti ^ n/c 7 ^ -tr XSiJtaJ U X F ^{Sf# 
LTl^^tO^-r^o ±a5LfcJ:-ple:. S-tTt^ 1 007 
^•fexilfiJP;!/— ;l/^^^bT^D> SRCy^— ;i/F^D 

^0 STy^-J\yY't(Dmi3m^^i^^. PROCy^-;l/ 
[0 0 6 4] 

mm^^l 0 2 2Tt^. /^y^y Fy^;b^5? 1 0 1 t'ibX 
:^i:LT-^A6n/cy-Xl P7FUX ri 2. 3 4. 
5 6. 7 8J fe<fcO'-r-<X7"-<^-— >^3 VI P7FUX 

ri. 2. 3. ij tcom^^M^-ti.r. m^^jiT 
^ -tr X ;U^ftl3 toT cradle. 7 ^ -fe x MiS U x 

F T^— ^ X05tSltTA^ «^lilii:S-7 ^ -feXSiJS5i;U— ;l/ 

L 7b'^ b . S;^— /I'OSi'&^ff ^ fid mE7v.;^j t(Dtt 

50 l$^iTV\ 3iS&-r^M?7307^-tXSW>'l/-;^^«Smr 
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COBtiST'ti. r (SRC : DST : 1. 2. 
3. K PROC : ACC E PT) J (TpROCiA 
C C E P TJ fiAti 1 P/^^'v hOD^m^yrs-T) ti^5 

a5l 0 2 2ti. r(SRC:i 2. 3 4. 5 6. 7 8. 
DST: 1. 2. 3. K P R O C : A C C E P T) J 

[0 0 6 5] 

TACCEPTj T^^c:^;^fiii^.-r^^. fcfc-^icx 
t) I P/^'Z-y h^l^lSOig^gp 1 0 3-\tBmir^o 

[0 0 6 6] 

*y hO-r-rX-r-f^'-— >H > I PT KbT^^l^gpe^tcS 
PZFl^X*^5»J^^tlT*3 0> ^(oi-^ff^ ri. 

2. 3. ij T^^^^o^-r^c c(om^. mmi^i o 

3(i:. A;^ I P/^^^v hOx-rXx^^-^-v^a > I PT' 

Fuxri. 2. 3. 1 J jb^i^^uxMciess^nri^ 

2^'«tgrc^nri.^^m2cDrtjMfS-i'>'t^7i--x 1 0 
5-\i:e*-r^ (mi om^) o 

[0 0 6 7] 

»:)^!a2ti. ^i2C0[^rMfi-l'>'^7x-X 1 0 

N-A C K>'^>!r>> h^gr^OV— X I P7 FUX (T^t? 
'&Ifci§i7C^^x h 3 0 I ) ^faittTtB;'j'r§o 
[0 0 6 8] 

c 7 T ^ 7 :t -;U^a 1 Tfsllt <OSaa:6^^li 

tJii^nr, IA!iS7C^i-^Xh3 0 1 i:4o^t)ilS2i:OF^ 

[0 0 6 9] 

:fo^D^iS2-eti:. 7°D-tr +^ 2 0 1 7?WWW^t- tf 

x^i^^^:t>x h 3 0 1 ^mwkt^o ^ntm^YLT. 

7^o-tz>y+?-2 0 Hi. 7 r-l';U7^-bX-*^':t'^^y h V — ^ 

tCil^T^o iJ^IItS^^X F 3 0 1 ±CD7-Ati. :foi: 0 
^H2±C0WWW*9--extcS!tLT. ^^^iS^^o 

rCET /default- ida?NNNNNN 
NNNNNNN ( 2 0 0 >' W F^JS^O^ L) - rou 
000 0%u00 = a HTTP/1. IJ^l/^ofci: 
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-J ^5l#ec-rc^T% tt]SOnvvF^^?TLJ:3 

F^'r'i'X^±Oi/X7^A?fMtC3ie'-L/'d*. ^iiSn 
— F^^tT-r^<J:^^=i^>'F^^tT'r§o L/tA^o 
r. 9-A<oeA^tc. yu-^iy^ZO Hi:. v-XxA 

^iS:7 7'-f ;i/<DSI^T^^ftt)nfcc^^i3^l?«iaigP2 0 2 
2^^§tt{ttt/'cA:'j 1 P^^>:r^y FO^kf-'^j^^irre^S 

/(? -r^o 

[0 0 7 0] 

ijfcSl^ftlSP 2 0 2 (i. ^A6:/d -fe y^ZO 1 ±OWW 

ti. mtf. mi 2CD.fc-5^ff^x?-eie3zE^nTtoD. :7 

[0 0 7 1] 

20 rc : ¥W i n d owsj 7-V FU/c^T^^::. 

rWR 1 T E. C : ¥ I n e t p u b ¥ www r o o 
t ¥_v t i_l o g ¥* ; I NTRU S I ONJ 
(rc:¥Inetpub ¥www root ¥_v t i 
__1 o gf-V FUJ-XTlc^O^^T-r^Uffi^iiiL^tT 

tciSS-r^o ifcS?<taglS2 0 2li. 

r ; J l^T^#F.Psb. INTRUSION (MX) 
30 X U tcM-r ^ 13(^:6^^ o fc <!: ¥ij£"r 
[0 0 7 2] 

rci^T. JjfciP^aSI5 2 0 Zit. 'pr^<h^. Xt}} P 

/^^^y Ftc^^n-sy-x I P7Fixx^. i^m^n/c 

Ij^|gc0;^7^3y3b'« r I NTRU S I ONJ r^s>^^t^ 
iill (DIM-Ot^^x— X 1 0 e-^feiit"^ (HI 1# 
[0 0 7 3] 

[|iij'®-f'>^7x— X 1 0 6TSfi^nfc7'^~- Ft±K 

ffi];!/-;!/^?!]^^ L /c X ^ U F {^llx. (f 7 r ^ ;bffJ^ 
TSJtLTi^^o Sl5fi»^-;^^i^ m^o&i$f^;^7"^' 
U (CI ?t 1 5iHS-r^fl^itT% 1 r>(OT^^:^^UU?\^—)\^ 

[0 0 7 4] 

intrusion: (SRC:$ {S0URCE_ 
I P_ADDRE SS) . DST:*> PR0C:DR 
50 OP) •••(!) 
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39. 

- h(oKti^mfrcmmjv-jvmm^ \ out. mmju 

-;uoai84>^T^;u^fTC'^:ti:#?s.L. ri ntrus 
I ONJ ;^jxdrutcmr^l56'#i^^->'i^"t:$>^^ (D 

2. 3 4. 5 6. 7 8J (-r^4Dt»lfc^7t:4->X h^D I P 
7FUX) tCct-pT. r$ {S OUR C E_I P_AD 
DRESS} J^H^L. 

(S R C : 1 2. 3 4. 5 6. 7 8. D S T : P 
ROC : DROP) 

• • • (2) 

i:V^-5 7^-feXSirfai;l/~;l/^^^-r^ ( TDST : *J 
(ifiE^,0-r^X-r^:?^— y I PTHUXtCja^-r 

[0 0 7 5] 

0 7;b^^iOT^-trxa»l'-~>^l/OA:':^c-^v^TM 

mmim 1 0 2 3 trjaii-r Mtfjaiigp i o 2 3 

I? (2) T^^nsT^-lrXSiJffli;U-;i/^. T^^-fe 

X»UX Ft-*— X 10 2 1 tC^K^IiiL^ ^OilM^jn 
:&j^^t-^o 7^'bXS«eilUXh'r-^-^-X 1 0 2 1 
Vit. it (2) T*:^^n^T^-bX»J®;U-;b^iEi!)nf 

^ J: ^ 9 o ^^OP^.. 7 ^ -tr Xfl/iJI^l U X h 

T^'-^-^-x 1 0 2 ifi:. ^nar4toi^^*aa>b^«jiro 

tf. ^4t7:)<}:5 35:'7^^X hJgi^TnS^S^n^^cr ^-feXlliU 

il^T$>ntf> it (2) ^^^sltirtcil/jarntf J:t^o 
^0. rctK:k^ (3) iii^-rp/'ccta^T'^-fexaifJW;^ 

(SRC:i2. 34. 56. 78. DST:*> P 
R0C:ACCEPT) 

• • • (3) 

mm^mmmim. 1022 v-x i ptvu 

Xri2. 34. 5 6. 7 8 J ^^^xtj^^^ffcm-^ 
la^. ^ (3) T'ti^<^ (2) ^<t^*S«^LTtb:ti 

(H 1 3 #03) o 
[0 0 7 6] 

^j^tc. i5^^7t:^t>X h 3 0 1 ±(DU—L.t^:k<D^iL^9zt 
LT; ri. 2. 3. 4J ^mtRLrch(Ot'r^o l^io- 

A;^^3ttfc/^'ir.y h7^;u^ ion*. Z^-tXSfjS? 

ijxb^fuiffPi 0 zif^^m-^r^T^'^T.mmji-^i't 

LTit (2) ^^tt^§^OT% P ROC:7^— ;l/F<Oit 
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^ TDROPJ ^cVt\^\ ^KS YN/<^*y h^H^^r^ 
1 4 #?S) ^ 
[0 0 7 7] 

»Ke?'>X-r Ati. IAS7t:>^X h 3 0 1 ±(07-A3?)>E> 
(Oikmt'ib. rtr^P^^-y hy— -5^ 4±tD-9-->'^Kil4 o i 

[00 7 8] 

(^2^fitiJBSI) 
2.1) ttM 

Hi Sti. *f|8^fD^2*j5tS]^.^JcJ;;5i5c«l55S|l>'X 

jvmm 5 ti. m 2 tc^sTJR 1 nmmAc^if ^yr^r 
^^-jvmm 1 tc{i^jsgagi5 502 ^tu^. ^ e>tci5i 

fp]^?*/izT'#^r^wa5 5 0 1 ^w-r^o i-xt. ^2ic^ 

t*'>XxA^|5]i;«fig:/a'y^t£:ov^Tti:. f5j-#B9S 
[0 0 7 9] 

20 Hi 1 5te::tev^T. |g^HI5 5 0 lit. ^^^y h^Xii't 

^t. mmmmm^5 0 z^xii \ p/^^^y hcov-x 

I P/'^^-j h^^lOl^g|5il{I^>^7x-X 1 0 44*5 

xifrnzcDp^t^mm-^^^yji-T. 1 0 5oo^*rn*Hc 

[0 0 8 0] 

fffni^WBJiSP 5 0 2 I p T F ux ^?iffc:;-r ^iiSiiS: 
30 tcom(Dm^^mE-t^o f^«gP5 0 1 t-^bm^tr^^^ 

LTfj|iSifti5 5 0 i^iiL. 'i^m-t^^vicmMmomm 

[0 0 8 1 ] 
2. 2) 

HI 6ti. *:^WjcOiJ5 2^SIgJB^ti:J:^Jfc9I^B6fflii^X 
•r i> ^Dfijf'F 7 n - ^ -v — F T ^ ^ o 
[0 0 8 2] 

^"f. tfn |l^ffim-.t07r-^T'^:t-;l/^i^i ^ImM 
ic. -f-v^-^^^y F 3;b^e>OA;^i I P/^^-y F^^flT 
(XT^^y^A 1) . /^^^y hy^Jiy^ 1 0 Hi. T 

^-fexarffliuxF'itEii.^-p.i 0 2r^{gf*^nTi^^r^-tr 
xflj»r(»;i/-;i^<^rtSt^fSL:T. ^I^A:^ I P/^^^y Fo 
§:m^rcimm^nr) (xx^yyA2) o ^n^n/ti 

P/^>>-^y FtiM^a5 5 0 I ^^iiiM^n^o 
[0 0 8 3] 
2 . 2 . 1 ) {i^jSSa 

|§2SSr35 0 1 it. Kil I P^'^^^y Flc#^n^1f$R<?3 

•9 -fe^^S: < i: V-X I P 7 F UX^fnl®lii:^HIlS(5 5 0 

50 2^tti:tiL. mmi PT YXyTsiznT^m^^^m^-t 
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^ (Xf-'y^C 1) c li^JSgaa55 0 2(iI P7Kb 

P:f*:Mlcti. ^J;^Ci\ ri. 2. 3. 4 : 1 OJ 
:&^<DJ:3JC. r< I p T K U'7.> : «i«ia>J 

[00 8 4] 

tc-^ct, jftc^oi pz Hix7.icov>T. nf^<t^m^& 

0 2ti. Xfl^ntc I PT FU7.lC^fS-r^ I PT FU 

as 5 0 i-^m:^-r§o ^>L3ami PTFuxii^^B* 

[0 0 8 5] 

^^n-sj^atc. {f^jg^c^scc (>i) ^tm-^^o 

[0 0 8 6] 

c [n+ 1] = c [n] +C • • • (4) o 
[0 0 8 7] 

2. 2. 2) mSijjStC;lifioX/'^'y'y hnS^^? 

|5§ijigf55 0 1 (i. fX^f Lfcfimjat-iSCT. ^ISI P 

[00 8 8] 

tcti. At! I p/^^*y mmv^^} tm^x.. ^ 

[0 0 8 9] 

A 4-A8) izlKlDTfeSo 
[0 0 9 0] 

2. 2. 3) mm^(owf\i5tk 

m \ 6 0Xx'y::^C 2tCtoltSfi*SJ*<7)MrT73S(i:. 

±^L/c^ (4) WUOTaii^^^c ^i^x^ (5) 
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I P/^y-y hp<D/W h?iL (p) ^-&^T*3#. 
,iffigfel/L (p) ;&ijp^r^c}:atcLTt>a«/^ 
[0 0 91] 

c [n+n =c [n] +1/L (p) • • • 
(5) o 
[0 0 9 2] 

-astc. /Vy >^r;5i— v'^-T^D-ifeli^-^-ex 
/(? mm (D o S) iA!8?^l£lM^ U/c 1 P/^-y^y FtiIE;nm 
iifirt^^ *>•:::> I P/^^^y Ftchl:--CT:^#35:-9--f X^t 

nt>Oi3^9^cORFNfe14^t.oA:/D I P/'^^-y F^. 
[0 0 9 3] 

mc. Xtl I P-'^^y-y FOT'D Fa;l/^f^^^i5'46T*3 

A:^ I P^^^-y F:6^T C p-eSS^iS-^tccO^. fitiJi£^ 

F:3;l/#-^/c:tj-TJ5:<. ^Oflli I P^^y^\ T 
CP-N'y^\ UDP-N*yi5?*:&^tC'&^nSffiScOlf$S^ 

[0 0 9 4] 

^^tc«UO--{5^0h UT. A:^l P/^y^y Ftroi-r. 

{m\]!ih(om(oi&^\ziX7^x. 2001-101 1 
5 4^$g (*mgsAtCci;s<timsi) \ctm.(o^nm^ 
tm^w^mnA^mu 502 \cm^^^tSo c <om^. 

[0 0 9 5] 

iiati:. ^^"^-^coxiiiy^ h^\SL\^fzm»mmtvy^^ -if ^ 
SIC. 1 (@(0^si{i^LT^^ns rx=]7fiij ^giii 
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[0 0 9 6] 

Ell 8 (A) fn^mmmn^m^^Tcmmimm^ 

5 0 2(Dim^m^mr^^K}. (B) i,^.^(D-m^yrs 

TtiffiA^n^v- rt-^^:3t.^K^^n^v>) ij^ii^ ret 

[0 0 9 7] 

[0 0 9 8] 
2. 3) M»I?»J 

[0 0 9 9] 

0 1 9lJ:^-rJ:3l-. h 3±^OI^C^7^:J^ 

-/^^iil4 0 1 LT. Ping O 

f D e a t h^ifOD o Sij^^S^tf ^if^^^^^o 
[0 10 0] 

ri 2. 3 4. 5 6. 7 8J icJ^-r^filSS:^^ 30 

5 0 1 [cm^^nrcL^i-imT'c&nii. 112 otc^ 

Tct^tc. Do SijicSS^t«^-r^ I P/^^'V 

^S2-^si«^ti. ^-^^aH4 0 1 itum-^n^o D 

T\ 4oi:!?^B2tcJ:^it-/^^B4 0 l (^^ffili^b^jifiS: 
[0 10 1] 

fc^^ff. EI2 UcS*r«5: "pic. -r^^J?— ^-^^y h 3±tc 
il«O^^X^3 0 Z/b^e.. ^t-^N^S4 0 l-\(7DZ^-t 
X?b^fe-pfc«3^. iJunBM^I^J**^-. 77^7^^--;l/^ 
m 5 Ofi^iaWIlSP 5 0 2 tCcfc 0 . S^O^i-^T. h 3 0 2 
CD I PTFU7.tc5*-r^fISi^3^^^ffili^^T-^o 
[0 10 2] 

^L. mm(0^>7. h 3 0 2<?:)fi$M3b^^+5i't:'Sn 
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So Ci:T% 43^0igS2toyD-b*y1t2 0 IT. -9— 

4o^t)^M2^ia^LT4o<c r^^^. ^tom 

/c;b^oT. 3 0 2t*@M^O-9— ex^gtt 

Xh 3 0 2Ol P7 KU;^tc5t-rS{i3ig[ti:±ilib/c:{i 

T^aSxSo finite ;b^L#i/^fii!{T^iSx./c:ttti:. Ii2i'?f^' 
O^^Xh 3 0 2;6^eOT^-trX^«^*rS I P/^'^r-y h 
hr7 — ^ 4rtcD-9— >'^ISS4 0 l-^0S2S$n 

So 

[0103] 

OT^-feXlCOV^Tli. 'r-<T^-/^^Il4 0 1:^^JS^ 
fSo L/c/)^oT. 4o^0^B2/)^i3^^^§t:^T. 

# S 1 1 ^ ^ 5cjtli^^ t-=>o 
[0 10 4] 

j5:4o. *5i:0^S2ti:+f-^^^g4 0 l±0^ife^^ 

If x/tnt^^s 1 0 SB 2 rm±t-r s J: ^ ^c t^^^T^ 

So 

[0 10 5] 

3 *fitHff^«i) 

112 2 fi. 2^5eBJii03B3illiffi?K!Stc.tSij^.^l5^^ 
r-f T'^:i--;i/^ili ic*5^tsn§^:rfPi o Siztu^r. 

m 5 tc^xf ^ 2 mmmm<Dmms^ 5 0 1 4o<j:mi^igw 
USPS 0 2^wrso 

[0 10 6] 

^0 m^wmat. m2 3 tc^s-r 9 ic. m 1 1 0 
3(DmRti.rm2(omm^5o i^^^frhBii\ 52 

le. ?fS 1 (O^^SP 1 0 3.c?XjulSi: LTiS2 WJI^fflSS 0 
1 ^^KttSC ^^>T'^So 
[0 10 7] 

I PT FUX^iM*RLTtT^nSiiJ^^> 

v^*tCcfcS^S2:Sg<offi:^ii:J4iST^#s. ^^/^ 

5 0 1 Jlf8Si^n/cm. 7-Al-^2S^"rS^^'L/c 
50 it^T'*.. t5tO'^m2lCXl}L^(Omm^^.Mt^Ct 
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[0 10 8] 

4 . 1 ) ^« 

02 4(i. *5g0^tc43Ct^^4^fi!HJK^JCcfc^lAS^P;5 

0 2 tC«^T. {i^g[WSa57 0 1 ^^igSE^nx 
[0 10 91 

0 2 4 Jc^-r J: ^ tc. fgS'ii§!Wiy!J5I5 7 0 1 it. V 

2. SmmiaS-r-^^-:^7 0 1 3. *5J;0\ Mrrsa 
HHilSP? 0 1 4^ffii^^o 
[Olio] 

X7 0 1 1 tDF^S^. li}WfigllJ£x'-^^--:^7 0 1 3 
[0 111] 

Simfg®i)^T^-^-^->^ 7 0 1 3 li. I P T K bX. 

WST^o MSTSailgl5 7 0 1 4(i. 

^*-.^^-X7 0 1 3^#B?.U. rT'/iZO)9JIIU<^'9^>*^"^ 

[0 112] 

4. 2) {i^lKWJI 

osapjiti:. tfi 2 '^SEBjgffi«^:7 r >< r ^ 5 1 n 
—x$>^ (m 1 6o;^x^y:/A i — a 2. c 1 — c 3. 
A4'-A8) o fctcL. ^nmmm(ommmmm^^7 0 

[0 113] 

0 2 5ti{s®iiii:iiYiyi2P7 0 1 ^c^^f^mmimmm 
mi 0 1 ti. u7';b^5?-fi^mrufi:T^-^"^-^7 0 1 1 
7'Dn o ^1^1 P7¥\y:^\>ctiiic:^r^m^^^B^m^n 



24) ^#^2 0 0 4-3 0 4 7 5 2 

46 

:/D 2) o 
[0 114] 

1 PTFlxX^^:^^JS•r^5•^lil^^UT;^^^A{a 
^a•r-^^-x7 0 1 1 tcfs^^nTi/^^^i^^it^ 

T^^y^D ICON) . ^-r. 0 

^nxv-^if^ (X-r-y 7^0 307) . sffld^^T^-- 
^-^-X7 0 1 3OfS^3lg(0rt^ ( I FT FUX. (H 

^_;;^7 0 1 UC3l^-L (X-r-yT'D 4) > mm^^ 
miir^ (x-r'yyD2) o S^^^S7=^-:5?^— >^.7 
0 1 'S^C^mmmf^'^^J:^^^^^ (X7^-yyD30N) 

vTj\^^^j^mm&7'-^^-y^7 0 1 uc. Fm<Din 

D5) . {8i"i)S^aJ:^)-r^ (x-r*y:/D2) o 
[0 1 1 5] 

^LT. HI eoxx^y^c 2tctoV>T{ilifi<OMST 

*^?T:bnfc^#. {Br^iism^5iiir5i5 7 o i it. i ptfux 

^j^X— iJf^— X7 0 1 1 lCiEii"f 
[0 116] 

4.3) vTji^-cL.im\m(ommmm 

U±«OBSi^M^TLT. ffliaMaa5 7 0 1 2ti^W6^ 

X7 0 1 1 O^rtS^AJfiSL^Tb^^^. ^ifiB^JtinfSi'i 
^-^_^-^-X7 0 1 3-\=3e-LTV^<o CC>^#. 

30 g;|:i;T;b^^A<i^Sx-^-<-X7 0 1 1 /)-e>Nm^ 
T ^ ffiJl^tT o T t> ^ 
[0 117] 

4 . 4 ) mmmmm(DW.wimS: 
^/c. s»Tsaagi5 7 0 1 4^. j^mmc m^^^i^i a 

C^^tC) m«9fiiaSrT--i5^-^-X7 0 1 3(0±^^^& 
[0 118] 

4. 5) 

C0T% SDRAM^^if. (S^M-eSiS^ISItx^WX^ 
)|.Jl.^;5C t^^T^^o -7^. Jl)9HSIiHlKx^-^5'-<-X7 
0 1 3ti:7^-tX^Jg^^^>^5:l/^C)t:\ Fx^X^x 
/N^X^H. :;^^MTMg:iS^ISMxVWX^fflV-;i)C^ 

[0 119] 

50 ^/-c. W.Wmm^7 0 1 4tC<fc^gfflfM3S^x-:5?'^ 
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:^ ^ C i: # ^ ^ -5 Ja^^ ^"^o 
[0 1 2 0] 

mm(ommm.^m^ 502 tc^^^x. ±^i.rcm 4 mm 

4 . H 2 5 fecfct/^ 4 ^JEfl^^JcDliTlttB^ bfcil 
[0 12 1] 
6. 1) tfJfiK 

7'L.<Dyr^T'^^ - 9 ^^"T Hms e<j n *y ^ in 

T. ^^'y7r 9 0 1 l^cfct/I CMPi5^aa59 0 12% 

W-r^iS»gP9 0 1 jb^tenrv-^c **fi{im^T' 

< . 1 C M P b ^f'Jffi i.X^m(OmME^mM'T:^ 

CO 1 2 2] 

/^^y7r 9 0 1 1 ti. :^KiC7i^^^<^^^^^ ^^^^^ 

L. ^lF^^.31{i-l'>^7x-Xl OS^^bTrtgP^"' 
^r7^^-.te2ir^i:ttt-. I CMPl£*ia59 0 1 2 

(i^V^J'^x-Xl 0 5 3&/t'LT4o^f?gli2--s}»J3M{g 

-r^o I cMPi^iia59 0 1 2ti:. ^1 ortSissm-i'v 

^:7x-X 1 0 4tCtDtt^ I CMP^'^^-y hOSfM^lg 
^N'y-77 9 0 1 1 IC^S^^^v'^'^r-y hWM^W^'^^o W ^0 

[0 12 3] 

6. 2) iSf^ 

HI 2 7 (i:*^StBff^ffitC <J:^7T^7'>:t -;U^S 9 (D 

x-X 1 0 O^fti^r^iy^-^-y h 4yb^^S{ib/cA 
1 P/^^^y htcov^T. >'^y h^-Y^l':^ l 0 1 tc«J: 
^y^)V^V:y{f^no (x-f yT'AK A2)o 

[0124] -^^ 
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gfl^n/c I P/^'^r-y btilgH^a59 0 1 tO/^^y7T 9 

0 1 ncsffi^n (x-r^y^E 1) . mMmcm\<o^ 

Si53i2fi-<>^5?7x-X 1 0 4%/VLTrtr?i5^'>^y hV-^ 

3-s)Mai^n (xx'yyE2) . H'x:^)m±t 

(Xx*yyA4) o (i<0«^. fc^x^^/^^-y 
^^.OifeSP^^^t^T ^ mil-5M{i^ T C P =i ^-^^ a 
i^^fci^lfC. S YN/^^^y hT'fcntfgtj-AnT^F^Sti 

y h (i5?-f:/3) :6^jg^tiSe 
[0 12 5] 

I CMPi£*IgP9 0 1 2fi> m 1 C0P*9a5M{M-f 
x-X 1 0 4TM CMP/^^-y h (R F C 7 9 2ffifc) 

t'^^is-^n^t. ^n^i CM p/^'^-y bortS%#psL 

7^3) Tfe§A^S3b>%li^^ (x-r'y:/E3) o i'M^ 
ftg^aie^irSJ^^-T-^ntf CX7"^yyE30Y) . ^ 
CO I P-\«y^*^%^8lC#PBL. ^>=S:< <h^>V-X I P 
7KbX^L<(i:T'^Xr^^---'>3>'^ PTKUX:^ 
ffii^T/^-y 7T 9 0 1 Ucll^g^^t^^ (x-r-yr^E 
3) o ^cofijiO^^y-t-v^T-feo/clg^Ci:. -(51^^^^ 

[0 12 6] 

W3M]^^*%^^t/c^Vy-7T 9 0 1 ^>^< ^^^y 

—XI P7FUX^>b<ti:T'-rXx^^^— v'a^I P^T 

Ki/xictA^oT. mm^ntc^^'ry hf^-ibmmr^^^'r 

-J h^JfttBL. ^^^/-^-y-y h%m"2(?:^rtiM5^<.^'f 
x-xi 0 5>^/>bT. t^'i:*:)S§2-\B5Mri) (XX 
•yyE4) o UT> -TTtcai-^/'cX-r^y'r^'A 5-A S^'' 

[0 12 7] 

c CO J: ^ {c^mmm^^-^^^^^^^- ^ 3 vesitco/'c 

I P7 FbX%^?§^UXh^Lr^JviiutcnS/iI-r^ 
C^^^Ltc. gilj6^tc*ffiffll P7Fl^X5BTC0A±lI 
P/^>^r^y h:&*5^D3SB2^ig»-r^Ci:jb^T'€So 
[0 12 8] 

(^7*811)^11) 
7 . 1 ) 

^2 sti. *5W]<7)m.7^^ffi©r^jc.fc^i3j.'^i5^'^ 

;2>|5StS];i/-;^W^^ 1 0 7 4oJ;t/7^-txSir<»UXhW 

00 i4oci:t;wjaiM^f^r^7^7-txsyfflJuxFgsa5i 
0 0 2%rsttTi.^i>o 

1 CO 1 2 9] 
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RS'^;l/-;b#iJ^gP 1 0 0 Hi:. »JP-i'>t5? 1 
UT. f,i«ilff lIBIlSIS 5 0 Z^XXSl 0 1 tcWUT. J^flS 

•t7.;iiiJWU X h*gS-!gP 1 0 0 2 \fZ^<OWS\^1^7r>rr^o 
[0 13 0] 

{l^JtWiias 5024o<J:Lf70Ui. RfiS^Jyb-yUf'J^ 
as 1 0 0 1 ;b^e>OMST^§^^^§^tT. Srfc^fi^S^}* 

as 1 0 0 2 ti. R6'(ai;b-;i/W^a5 10 0 1 *^c>(DHSTit 

0 i?b>6oH*ii:jsi:TT^-fexfliiJffli;b-;b^ 

[0 13 1] 

7. 2) ffijf'f 

[0 13 2] 

Vh\ 7 7'-f'T'>:t-;l'^Sl OtCcJ:oT. *5hOSS 

2-\|§2i^n. 4o^o^g2tc4oV-T. ^iSX:^iiP^^ 

b^^^jMfi^n^^Tii. HI 6^0X'r-;/yA 1 — A 7 
^■rj:9tc. m2-^5^itnJl^ffitc4oCt^i3c»K®^>X 

[0 13 3] 

^^y-fZ^^-^^l^^M 1 1 0 0 

1 KSl^lz-zl/WJiiE^fP 1 0 7 \mm^ 

tf. |SSjB;U-;U^LT. (6) coj: -5 ^515itOiEiili 
[0 13 4] 

RECON : c ($ {SOUR C E_I P__ADDR E 
S S) ) 1 

• • • (6) o 
[0 13 5] 

IP7FbXri 2. 3 4. 5 6. 7 8J ^:S'^7':7 — 
h;^)'^S^tgx§ P583i;i/-;W/izSP 1 0 0 Hi I P r H 
UXri 2. 3 4. 5 6. 7 8J tcWT^fl^S^ 1 

•^cD§^{l^^Waa5 5 0 2/7 0 1 

5 0 2 ti^ 2 ^fiiHJfmiTmP^ J: ^ tC{i$lS^MST 
{i3iiS[SJia5 7 0 1 tJ:^4^fitc)T$SftT?IJ^0^U/'c:<fc'5 
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[0 13 6] 

^/-c. 7r-i'T':7:t-;i/^ei Otc:fei/^T. P;SmJ;b- 
1 0 0 1 rttc. m^)\^-)vmm% 1 0 7 hlrtltK 

Sr/ctc r>f:^?ijJBJ|l't]j ;&^-r:7^-;V H^eiK 

ti\ (7) tOT^Tcfc^tc. fitlB^ (1) or*»^b- 
;l/tCEXP I REOJS^iEijDb. r7 0H*SiJJ ^^/^^ 

[0 13 7] 

intrusion: (SRC:$ {S0URCE_I 
P_ADDRE SSI.DSTI*. PROCIDRO 
P. EXPIRE:+7DAY) • • • (7)o 
[0 13 8] 

^iaLTRfiffli;i"-;^¥ij^spi 0 0 1 tcea^n^^. 

iai;i/-;bW^gP 1 0 7 iLWrnD-n^^-r:^ :(k^ (8) 

•r<fcaicr^-fexaiir^;b-;b:6^'*^^n. t^^tmu 

U X hgll^P 10 0 2 iCfejS^tl^o 
[0 13 9] 

(SRC : 12. 34. 56. 78. DST:*. PR 
OC : DROP. EX P I R E : H-7 D A Y) 
• (8) o 
[0 14 0] 

^!K\^^ T^-tXJMVXhimifJM 0 0 2ti:. mn)\y 
-;l/¥ij^gr>l 0 0 1 ;b^e>§ttIXo/c7<>-trXf&Jiai;l/~;l' 

CO^#. ^ (8) OJ:5tCEXP T R E 
KTb^T^-trXftfJ^lz-^VtclSm^nTV^^lt^. 
x^jffli u X h wagp 1 0 0 2 ti. 3iaB$S'Jt^:. E X P I 
R E 7 -/V H lcJ5!i:a£^ tifcffi^/jDP: t fc0 J^J^ W tB L 
/c±T\ 5^-^-^— X^^SITr-r^ (|li7 0Xf-^y7'A 8 

[0 14 1] 

1112 9 ti. T^-fexiiiWDxhrniirsi^i 0 0 zomm 

^-^^-X 1021 jb^MlfT^n/'dt. ^U^V-XT H 
1x7. r 12. 34. 5 6. 7 8J /b^^OA:;^ I P/^'^'V 
h;b^7T-l'7'^:e-— 1 OtCgiMt"^^. f^^vV 
y^}V'^ 1 0 1 (i^iSV-X I PTFUX^7^-trX$iJ ■ 
j»U X hm^giffP 1 0 0 2^ailt bTT<>"feXl|iiJfflI;l/-yl/ 
(Om^^^^Vio (Xt^'V^A 2_1) o 
[0 14 2] 

T^-tXfiriaiU X 10 0 2 li. SUSV-X I 

PT FbX(c:?^fS-r^T^'fexMP;i/-;i^^1^^t-^ 

(Xx7yA2_2. A2_3) o S (8) tCffi^l"^ 

7^-fex$'lW;i/-;i'^jTlitb*r^^. 7^-tx$ijeiiuxh 

m^IilLT^ 1 0 0 2 ti:. E X F I K E 7 -< —)\^ FlCnSiffi^tl 

I rzm^mmt.mx£m^\t^):m'^^ (X'r'yyA2_ 
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4) o 

[0 14 3] 

yA2_4 0YEs) > mmT^'tx»\w\^-)^^y^ 

•^7.U&V T.h'f—i'^-:^ 10 2 1 *>^BiJK^.L (Xx 

^^y b7>r/l/^ 1 0 1 '^MT (Xf-^y 2_6) o 
tc. ^S&RQP^rtTfcntf (X-r -yT' A 2_4 ON O) . 
(9) ^^:^^■rJ:a^EXP T RE7-<-7^K^Ktl- 
(Xr^y^A 2_7) o 
[0 14 4] 

(SRC : 1 2. 3 4. 5 6. 7 8. DST : PK 
OC : DROP) 

• • • (9) o 

[0 14 5] 

[0 14 6] 

^>'$,§l.MiT r a c e r o u L e^^cT) Tj^^fj icffl 
[0 14 7] 

^ ^ i: ^ S o 
[0 14 8] 

(JR8^fiEJBf®) 

*5^D^ll2tcK;^T. 2feU±o*5^t)Sll2:S:i5rty 
:jo^:0^^x^2 i^wtenrv^So 

[0 14 9] 
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[0 15 0] 

^-/^sgic 1 n 1 WK-r ^43i: 2 ^m^Tz ^ . 

[0151] 

(m9^fii£m« 

/3^t,>t'^/t5?-:t^^y h 4^fq]frtrjM{i^n§iti;^j i p^^^^ 

[0 15 2] 

:^^y hy-^3 03lfflJI^i:UT. ^V^-;^'yh4-. 
<07^-trX^^i:Ti.^^<J:3^«atc. F^SR^x^y h-y- 
^ 3 3b^8'i' >'i5?— ^--y h 4'\0^ii^7^-t:X^<^a 

[0 15 3] 

(^1 Q^msmm 

V :7 h ^ a:7 in <fc D ^ ^ ^ "^'^ 

[0 15 4] 

1113 Hi. *f6B^co^i 0*flSJeme:<t^iS:Sil»tai>' 

;^-;l/^St-ti:> T^a^'-^AffltSiyp^^y-^- 1 i 0 K 
±fB^ 1 9 *]5tfiffJ^Jc*5tt^^n^'no<tHg7*u ^y 

1102. 7^-trX;|]OTUXh7^-^-^-X'^|5)3 

-X 1 1 0 3. :}Di:t;^ffl-Y>i5?7x-X 10 0. 10 

t^^HtCti:. 7'n^'-^ASiJtai7^o-t«y-9-2 1 0 K ± 

^yii7;g:^g|-r^yp^''?AcD-fe'y h^tSSft L/cyu 
i^;?^^U 2 1 0 2*3J:tF7T-<7^:^-;l^^B^<^-l'> 

1 ~^9*MJKfti^oi/^-rn*ncis^-r^chT\ rf\w.<o 

[0 15 5] 

(^1 \^imm) 
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[0 15 6] 

IS8tai;l/-;l/f UaiJ I J ^ 7. ^ if t&Jrt L fc ^ 
1 0 3. ±f2mi~m9*aB)g^.tc*3tt^^n 

x~X 1 0 0 4oi:t;i 0 4:6^H:tt^nTl.-^o *^fiS^& 

r^Ctt^X-^^o ^fc. -fu^yV-l 1 0 1 ^yn-t 
^y-9-2 1 0 1 CD:^a-t»y^T*P^bT^ai^o 
[0 15 7] 

(mi 2^StI^®) 

12. I) mf& 

^ 3 3 ti. :*:560J3Og^ 1 2 ^flSJf^rSt^ J; ^ 4o ^ 0 ^mI 
0 2tC«^T. -f-^^MMglSS 7 0 1 *5ci: 

7 0 2^(1;^ §c 

[0 15 8] 

^^yhmm^Sl 0 ya-t-y'9-2 0 1 :6^e>e 

/c. I3c^1^^0a53 7 0 2}^^^U>'i7COX:^^S^tT. U 
[0 15 9] 

:^:tttT. i2:>^tciSi;T. ^-<yhmim\^3 7 o i ^ffl 

7 r ^ 7 ^ ^ - ^l^^Mtc ^ S" ^iiai-r ^ /c 7 :7 

[0 16 0] 

1 2. 2) i(}f^ 

3 7 0!IDj('f^^t'7a— — htrS^c 
[0 16 1] 
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12. 2. 1 ) ^^Z^hBM 

^•f^ y y T ^ ^i^^M I ti^ ^$3.^-^ nrcXt} I 

^Sfit-r^/c46<7:)^o<i7^^^^fi3^'f'^^o ^1-si 0 

$li6?g^tc*3lt^^^D^M2^:liS^t3. cco^lt- 
jg) • 7r^;i/XttS:b^&?T^*.^o^-r^o 

CO 1 6 2] 

^;l/Am*lc{S;g>'Y-^>b^. ^-^:vhgSgP3 7 0 1 
leHSfiBJeiS-r^ (Xr-'y T'F Do 
[0 16 3] 

[0 16 4] 

12. 2. 2) -f-<>'b«IS'J^O¥»J^ 

-Y^vheDe^^Sttz-c-Y-^iy hsiig|53 7 0 1 

^-^>'hfflS'Jh05^lSKi^^^i6/c-x-7';b ((13 5# 

CO 1 6 5] 

12. 2. 3) -f^Vhgil^^u.— "^<^iiiia 
•^LT. -l'-<>'hlSBllfS53 7 0 Hi. fjiinB-Y-^ V b ^ 
:^zL-tc^SJ^-r^ (X-r«yyF3) o 4^rL-til2^r 

ia*^fii^T*>i:</^c CCTHi. fci:;^(f. 
«iJc'i:tcl*'r-::>0^^-^ffiA^^Oi:'r^ (HIS 6 

CO 1 6 6] 

1 2. 2. 4) ^^>hm(OV>^it^f 

mi+^X^^ (Ig|4 3#PfJ o llffl^-Ohil^OU V 

^{^^t^A;^)L/'cI$^!^^^Pi■^P3 7 o 2ti. d 'DjiSetcL 

? /c/)^oTl3^3gC>^#.^^J^"t^ (X-T'VT'FS-F 
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[0 16 7] 

12. 2. 4. 1) ^jE*6^^U>'^<^tt>'l^->'l^ 
(US 7^#FSL^jb^e>> J;t5^{*&^5&^J^L'T. 

[0 16 8] 

n -tr X h m= gi> 3. - CD m M § h ^ 
m^.t^ (x-f'y:/H2) o 

[0 16 9] 

[0 17 0] 

#0g5t^i-::)lju75tc^91!J^^. Xx^y^^HS'N 
(Xx^y^H 4) o 
[0 17 1] 

-75. ^p^zX^fig-r-^VbT^S^::*'J^iI^n/t45^ 
(rt. Jgffi#?SbTl^^-f'-^>h^07°n-lrX I D^#SSL 
tij|Bf^^Ti^.>^n-tX I Di:i:b$5^^ (Xx-yT'H 

t^ii^ti. X'r*y:^H 4tcM^o 
[0 17 2] 

;5:*5. ^Uyh^-^yb;b^:/u-tXi«^-<yhTfe 

x-r^y>^H2T#sa^n5-r-<yhti;«3i->H 

X-rAtctol-Tt,. yu-bX^^tOP^ac. [HJUyn-tX 

-bXlD^. TbLx^h-r-^^biOya-tX I Dii— 
-r. £^■rx•r ^y^II 4 -xK^o 
[0 17 3] 

jiK:7DfpjU>^%:/n-fex^fiJt^-<>htc{^ 

[0 17 4] 
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[0 17 5] 

12. 2. 4. 2) -f'-^>h-^>'r^X h^tcofc;^ 

^>ht^ ^co=iy-r4^xhi:c>ja (-r^^h-^svi^ 
:^-Xh5«f) ^JfcS^^SigPS 7 0 2-^W:b*rSo 1^3 Sic 

[0 17 6] 

'12. 2. 5) Ij^PI^JP 

20 To -i''^>h-r3y7"4-Xh«OA:^]^§:tt/tij^Sgt^a] 
gl53 7 0 2 li. D T^gtil Lfc^^oTlj^l^OWil^M^ 
-r^ (113 4CDXx*y7'F 5) o 
[0 17 7] 

12. 2. 5. 1) K><'i'>-^-i'7^©J^i'^o^;lx-;b 

( 1 ) K ^ ^ ^ :^ai'J*^ (WT. D T fliiJSU) 
50 (2) ^^zyhM^i^ 

(3) 
[0 17 8] 

(1) DTSiJJi^ti. ^t'-^y h0^^1fx@^^o/cT^ 
•feX<03M^7£^i->X h ^ L < i^^(0^- -jY^-^Y:^^^y 

^^o/cyp-bX^'cfct/^O^trnT'D-trXtcKT^^I]^ 

^0 (2) h$y*^co¥ij^^^T9o 

[0 17 9] 
[0 18 0] 

'^^-Zt^m', rya^^^ATlJ ryD<>^^i.T2J 
•K^^^SySiti: ri 3 3. 2 0 3. 1- 1 2 8J o 
[0 18 1] 

114 0ie^T.i:3l-s cnt>OII/fJ^CiJ.;^TO^ff^t§ 

50 ^-r^c 
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[0 18 2] 
[0 18 3] 

. r^D^'^i^^T 2J cT^Siyp-bX^LT rya^'-^A 
[0 18 4] 

. r-y—zST'D^^Aj AM PTFUX ri 3 3. 20 

3. 1. 1 2 8J ^05^>?.h3b^^T^-^rX^§^tTl/^S^l /(? 

[0 18 5] 

tj:^^ Ej4 0(i Tit- >'^:^n^*-^Aj A^ rya^-'^'A 
ryn-bXT IJ ^/cti rya-tXT2j T-y- 
[0 18 6] 

(2) -r-^^vbSJ^^ (3) w^Mti. 

-r^^-^^ ttfK (2) ti^-<vb^^^^^;^-^<E 

j^c-oi^^rcommMornvh^o im^m^^s 702 

[0 18 7] 

^fc. tulB (3) lulB^^Vb^^miiS (2) tc^ 

g^Lfc^^tc. ijtsii$aigP3 7 ozf^'^^n^iE^tmm 

jEntmrnr^m^ommm^ tallowj . 
mtm^r^m^(om^m^ tdenyj t-r^o ^ 

[0 18 8] 
[0 18 9] 

tiT^?:)?S<04ffl Txxx.yyy.zzz.wwwJ hLTfiSaib, T. j 
(Di^^tLX. Txxx. yyy. zzz.wvw/vvvj (vvvti:^' ^ h 

[0 19 0] ^< 
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[0191] 

>^n-trXcOll^M«fe^ r<F(l)><F{2)> 
ST'S-rcilA^T-^^o CCD^^> ^n^encD r<F(i) 

[0 1 9 2] 

•txB*\ ^p,ic^o?^LT^tT®:7r-r;i/ rcj 

[0 19 3] 

>.*<c>j i:i/>^^-fr»J«i?iti. mJByr^Ji^ rcj 

(iatgT^< ^^<^v^) tf^n^jmy r ^ taj 

[0 19 4] 
[0 19 5] 

n^*W^.fi2-^- Taj vm^^^ti:. DT^ililOjRin 

[0 19 6] 

r$j (ommi^ii^m^ nrczfu^T. r<F(N)>j 

[0 19 7] 
► [0198] 
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[0 19 9] 
[0 2 0 0] 

[0 2 0 1] 

>^'>'XxA7b^ya-t:^y'9-2 0 l ±Tillf^ LTl^^it 

^-^>bWilgP3 7 0 1 ictov^r. 

[0 2 0 2] 

^ > h fg^zf.c^ D -tr X M ^ ^ y n -fe X ^^ij Tb'^tf 
[0 2 0 3] 

[0 2 0 4] 

[0 2 0 5] 

1 2- 2. 5. 2) 

(1) DT»^*5J:tf (2) ^^:yV%m<D±X\C^^ 

r 7 h fii ^ bT^46 D T ^grtics^^ nrc^ij^fii 



31) !^BI2 00 4-3 0 4 7 5 2 

[0 2 0 6] 

^;b-;U7b^fenti\ ^HS;^"-;^^^ (3) mi^m 

[0 2 0 7] 

^LT. }fffl^n/cfijsfii;t)^i^^ (ALLOW) i-xn 

/(? mi^SS?^^l-*5tt^:fei:t)^il2hm^tc. ->^<^ 
miiE7^-bXOV-X I PTFU'Xi:. fliTlB^fmi 

[0 2 0 8] 
1 2. 3) am 

*:|i|iteJg^tc:Jott^:fo^0^ii§3 7 ti:. 7^P-tr'V^t2 
0 l3b^ftiT^^^>Ft--:Pt^T. -f-^>FS51gP3 7 

l-;5o cn^ilJO-T. lAi?1^.ai^3 7 0 2T*T^-bX^ 
20 .±^Xh^. -it7*>'XxAcOP?t/tlibBHI&^H^#i6/c. 

$i;5:-9-:^^^X7^A«fig^^o+h-^^tc^-r^ii(S^S]14. 
[0 2 0 9] 

12.4) P:WJ 

[0 2 1 0] 
30 12.4.1) m& 

-Vf:X^LTWWW'9--^^/JW^LTl/^^'^^0^'r^o 
^LT. -^-cDa^T^V^ypIilH^. "C:¥lnetpub¥wwwroot" 

ixXxA^LT. WT0 2-::>(DCG \^i/:x—)\^^m^ 
[0 2 11] 

(A) ^^cG I : m^^n^m^'f-^^-:^icm 

^0 O-^XS : "C'.VInetpubVscriptsV 

regist.exe") 

(B) fcB:^CGT llSmT'^-^J'-^-XOrtS^HTM 

;b-^M^-r^CG I 
O^X^fe : "CrVlnetpubVscriptsV 

view. exe") o 
[0 2 12] 

fcfcL. tBtlCG Ui:»€><S^f^ll<?3 1-::>i:LTfU^ 
^n^il^^SWi: LT4oO> F7-<> 4±tO 

50 WfIF;^-<>'' 1 0. 5 6. 3. Oy2 4"t}^^(DT^-\l 
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[0 2 1 31 

[0 2 14] 

[0 2 15] 
1 2. 4, 2) IBIj^^e^Jl 

^^-fT^h ( 1 3 3. 2 0 1. 5 7. 2) rt^S 
;b*^oT. ^n;b^iE«Tfe^«^043t:»)^«3 7<?5ll] 20 
[0 2 16] 

[0 2 17] 

^LT. to^D^BS 7c07'D-fe^y^t2 0 1 ±OWW 

[0 2 18] ^ 

(A) 1 3 3. 2 0 1. 5 7. 2:5^eor ^-tX^^fs 

[0 2 19] 

(B) ^yp-fex^^isr^o 

[0 2 2 0] 

(C) ?yn-bXT% SSST^-bXlctontSffi^T^-^ 

(c-i) zii/^-y^nm\^nt^y7^)\^K 

[0 2 2 1] 

i.:y.TtC. ^n^'n<DX7^'yyc*^tc:fc^D»!l3 70 

[0 2 2 2] 
12. 4. 2. 1 ) 

■:/D"fe^y9-2 0 1 ±cDWWW^— ^^^^ ^?iV7^-t!X 
^^fib/'cSig. :/D-t^y^t2 0 1 ^^e-f^^bWSgP 5 
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3 7 0 UC. -Y^V 1-3 5 0 1 A^eJl^nS (0 4 1 # 

PS) o 
[0 2 2 3] 

^-^>Y3 5 0 1 OrtSlCii. '>^< ^*>. -r-Oh 
^ (NW_ACCEPT) . 7^-bX7Cl P7FI/X 

( 1 3 3. 2 0 1. 5 7. 2) . ^nS^-<>b05£ftaS 
T*feSya-fc!XT'fe^WWW+^->'^oya-fe7. 1 D (7 

0 9) A^ieK^n^o cloiife. 7'^-fe;^7ti^o>K— h# 

T C P/U D P^^oya h:j;l/fflSU. S^R-r— 
[0 2 2 4] 

^^Z/V3 5 0 1 ^^SCtlXo/c-r-OhW^ia^S 7 0 
^Vh^i TNW^ACCEPTJ 0-f-^>hSSiJ^ Tj^x 

-f^v h Wil^^— li^. h 3 5 0 1 ^i&ijn-r^o 

^8tC. RlT^OV y:J7{W;l/'-Mi:tS^"'^'^>'^ 3 5 0 
[0 2 2 5] 

mftWtCti. 1114 2^#PS-r^^. -Y-^VhfflSU 
>hrtlClfific^n/cya-feX I D (7 0 9) lcffl^"r§ 

rpRoc_EXECj ^/tt* rpRoc_ 

P OR KJ ^^-iP-r-^y b 3 6 0 1 ^l^.^'T^o CCD^ 
■y'^y^-rs-r-^yb 3 6 0 1^5iimU/c:i:#> ^COjaS 
[0 2 2 6] 

^LT. ^r-^Vb 3 6 0 1 tC^^LT. ^-Ob 3 5 0 
1 -\<0«7irn]Uy^ (1I4 3CO^SO ^^^tiJ^L> 
h 3 5 0 1 t^l^tbT. -r^^h 3 6 0 1 ^(OmJi^Vy 

[0 2 2 7] 

tco'ik. -f'-^Vh 3 5 0 UCBB-r^-r^Vh-^yx 

i$c»<^.*pg53 7 oziarMr^o 

[0 2 2 8] 

I3CK1^»S153 7 0 2T(i. ^-r. m^ODT^fe^T 
-i';l/4 1 0 1 5&#FSb. .'U^fStB-r^o *MT' 
ti. DT7iZjS7 7'-i'>'t'4 1 0 1 05taF^:6^6iJU7^^C^^^;b^o 

TitT'ro;b-;i/^«ja:iLTv^<o ^*5. r#j Tjife^ 

[0 2 2 9] 

^•r> S^TJ^^^'i/— (113 90;i'--;H ) Jb'^itiaffi^^t 
*(?«Jo^^. K;^>i'y*Jm ro.o.o.o/oj 

) S/c. i^^fT'f&JS^ti r<inetinfo.exe>J tr^':)> WWW-^t 
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[0 2 3 0] 

XiJ LT. U V^^tO-f^> h 3 6 0 1 (Olhti^^^f 

So 

[0 2 3 1] 

^^tc. ^-<>h3 6 0 icoi^^^#?sLT. :;^D-fe:^ 
1 D r? 0 9J icta^^"r5ya^7^A*^T^e>'r^;i'^^ 

/^X^ rc:¥Web¥ I netlnfo.exe J ^tttt'T'So ^^tc. 

«ijTii#ffiL^l/^ brc:3b^-:?T> ^-<>h3 6 0 
1 tcfflS-r^yn-tXCigi^liyi^^ r<inetinfo.exe>J 
^fU^L. m^^^yUfi^ r<inetinfo.exe>J tcv*>^ 

[0 2 3 21 

h 3 5 0 1 <D\^m^mmr^o ^-fs h 3 5 0 1 
(7:>^-<>'hffiSfj7b^ r^.'yb7-^j x-h^ct^mmi. 

^btC-r^Vh^*^ rNW_ACCEPTj TfeS 
[0 2 3 31 

ri33. 201, 57. zj ^mmr^o c(o\mt. 

fm,i2bV-r>iliiJ*^J ro.O.O.O/OJ tCV-y^fSo 
[0 2 3 4] 

LEHWRITEJ -l'-^>h3 5 0 1 <D-(-<>h^ TNWSACC 
EPTJ i::^PS^-r^^\ C<Dm^. -^U^V>£DT\ 

[0 2 3 5] 

AULT ; ALLOWJ tmmtn. -f-^VhS 5 0 1 

[0 2 3 61 
12. 4. 2. 2) ?:^D-t7.<04S)c 

yu-t^y-9-2 0 1 ±OWWW^t-->'^tituie^^ 
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[0 2 3 71 

T^^-^^bSSOl (Ill44#?a) 

3 7 0 1 tCiEilTSo 'l'-<>'h3 8 0 1 (Dp^mzlt. 

ix<ti^. -Y^vb* rpRoc#FORKj m^jmyr^ 

)V(0/^7.^ rc:¥Web¥inetinfo.€xej ±i&c£tlfc^ 
r^'p-trXc^Dyn-tX I D (8 0 0) ^fS-r^Vb^D 
^g^ST^^T'D-bX ID (7 0 9) :6WiliSc^nSo C 
C0{lk> XU^yF^ (3^gO) yn-trX^ES'J-rS/'cAbO 

[0 2 3 81 

^-^>F 3 8 0 l(Oe31^^tt/c>l'-^>bWagP3 7 
0 1 It. Hflfe-r-^ V F 3 5 0 1 i:lRl*3ltC LT. >f h 
3 8 0 1 (7:)^-<y FHi«iJ ( TT'n-bXJ ) ^miSLl^. -f 
D-bX-f-^^ hSii4^^-'\-<^>' b 3 8 0 1 ^i&i)Pb 
rd^. >f^VF3 6 0 1 ;b^8-f^>h3 8 0 I ^(Dm^ 
fplUV^^. -r^VF 3 8 0 1 :6^e>-^^>h 3 6 0 1-^ 
(Oi^TulRjU^^^-^ttS (gi4 4#PS) o ^LT. 
>F 3 8 0 1 n:r^-rs-r^>h-:3>'r^XF?t^iAS 

itaisp 3 2 0 2 So 

[0 2 3 91 

lj^^1^>SPgi53 7 0 2Tti. ^i:[sHttC. ^^>F3 8 
0 1 icK-rs-Y^VF-nvx^XFJ^OU 
LT. ^-^VFSBO 1 cDDT^^iJyt^^tTOo -^Ofei^^i. 
-f-^>' h 3 8 0 1 ^<D^(Otf^-<^> baS'J ryu-bXJ 
-f^>'b3 8 0 \<Dm':f5\^')y^9t^'^^>'^ 

m'miw>3 2 0 1 ti-i^Wimr^t. ^-<:vf 3 b 0 i 

btlSc {.tci^^r^r. ^-<>h3 8 0 lO^-TT^ti Ri 
netinfo><inetinfo>J t^^-^n^o 
[0 2 4 01 

^ UT. F 3 8 0 1 ^#?a-r St^jV ^^t^^i- 

-^^FMm r^-^-yby-^J T^^i:^V^OT% -T-^^F 
3 8 0 1 0)ll75lP]y>^^#H^>L^<J^^ ^"^^o L:bvL. 
-i'-OF 3 8 0 1 tc:ti:t^^y hU-^^^> hmWi^^- 
-sO)li7?lRl U >^*^^V^CDT% -r-^^ F 3 8 0 1 <D]^yj 

-<:>h 3 8 0 1 icti^-y h9-^-<-^vFmJ[l!^^-^ 

F 3 5 0 1 ^-<>FWIia53 2 0 1 *^e>l5J?f "TSo 
^-<l/h 3 5 0 Hi. ^-Ob^:^^ rNW__ACCEP 
TJ . y-X I FT FbXTb^ ri33. 201. 57. 
2J -efeStDT\ -f^Vh 3 8 0 1 <D\^:^^>^ T 1 3 

3. 2 0 1. 5 7. 2j tmm-r^o 

[0 2 4 1] 

3 7 0 1 IC^K^aLT. ^^yh3S 0 1 7b^e,^-<>h 3 
I 5 0 1 '^tOia7?rojU>^^<^iin'rS<fc9icLT^><i:l'^o 
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[0 2 4 2] 

DT^e:7T^;L'4 4 0 1 i:OPB^^?T^A^ 

2^<^yc>^'&. ^^^y h 3 5 0 1 tmBi^. ^ ^> ^ 3 s 

0 1 ti. ^^^tc^a^T ^ c ^ < . 

7^>':t;bh^^¥'J^(a ( rOEF AULT ; ALLO 
[0 2 4 3] 

12. 4. 2. 3) n^x^^^y^l^tcJifr^^^T-f;!^ 

(i. ^-r. ^r^ffiiftT^-^*^ TGET /HTTP/1. OJ T'fe^ 
[0 2 4 4] 

^0*7 y ;b rc : ¥ I netpub¥wwwroot¥def au 1 1. h 
tmj ^m^'^^o CCDiftf^^^ttT. :fu^-j'^20 1 
(i>f-<>h 3 9 0 1 (IIi45#PS) ^-r-<VhWJigl5 3 
7 0 1 iC^jir h 3 9 0 1 
< 'l'-^>'h^ TF I LE_RE ADJ > K^i^O 

7 r ^^Ov' ^XS rc : ¥ I netpub¥wwwroot¥def au 1 1 . ht 

X I D (8 0 0) :b^fBtg^n^c CcDflk. *^JCB!^3A 

[0 2 4 5] 

;^?IC. ^-^VhSUgPS 7 0 Hi. -Y-^Vb 3 9 0 1 

y'h^m^rL—iL-f^zyvs 9 0 1 ^T&tvi-r^o tco 
h 3 8 0 1 h 3 9 0 1 -^cDmy3\^ 

^)l/^t. 3 9 0 1 ^^5>-f^>'h 3 8 0 \^(D 

3S^iRiU:/^^<^fiDt-^ (Ei4 5#ps) o 't(0'ik. 

V h 3 9 0 1 tClM-rS-f-O Vti^^^^ 

mm?^ 2 0 2ice^rso 

[0 2 4 6] 

^LT. I5^S?1^JPSP3 7 0 2ti. rr-<>b3 9 0 He 

F^ir § > b - ^ ^ ;^ ^ J^^t* ^ D T ¥ij^^tT 

9o t(D^^^. ^^yV 3 9 0 1 (D^^-f^ r<inetinf 
o.exe><inetinfaexe>J . F^^-fV^ fi 3 3. 2 0 

1. 5 7. 2 J tm%ir^. 

[0 2 4 7] 

:^j^(c. iSt.maiSP3 7 0 2ti. DT:dl8i7Z><>'W4 1 
[0 2 4 8] 

0.0.0.0/0. <inetlnfo.exeX FILESREAD. C:¥lnet 
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info¥.*; 
ALLOW 

12. 4, 2. 4) x—^-^—Tstjfei'F 
giJOS*T=^-i5?<D(^J^LT. TGET /cgi-bin/regist. 
exe narae=someoneHTTP/1.0J T'^^^^^OUjf'fWl^^ 

•To 
[0 2 4 9] 

(7) CGI oeift 

-So S/c. URL>'^'^/~^ rname=sonieoneJ tiS^^ 
a rQUERY#STRIN6J frcHSS5^nTi/^'5>^Oi:-r§o 
[0 2 5 0] 

COiftf^^^ttT. yD-t^y-9-2 0 1 t^-f-^Vh 4 0 
0 1 (^4 6#?S) ^'Y^VhWilg|53 7 0 1 tceStf 
;i)o ^^yVA 00 1 ortStcti. {i'^^< h^. 

rpROC#EXECj ^tTf^^^T^^UO/^X^ rc:¥in 
etpub¥scripts¥regist.exej h> MfH?^>^ci-lzXOya 

•fexiD (8 0 1) ^M-r-^vho^e^igiT^^iju 

fg^yn-lzXO-/a-tX ID (8 0 0) iiTb^lBig^n 
[0 2 5 1] 

:^tc. (14 6^#ps^^^. ^^yvmmt33i 0 \ 

ti. h 4 0 0 1 (D-f-O hSS'J^ r:^a-trXj i: 

ya-feX-f--^>hWil^:x-t^:'^^>^ 4 0 0 
l^aaiD-r^o ^Om. -l'-<>h 3 8 0 l;b>b^-<>h 
4 0 0 l-vO|ii7ifR]U><>^. ^-<Vh 4 0 0 l:^-e.-< 

^>h3 8 0 i'\o25:?^[Ri^J v^^^tipb. -r-^>h4 

30 SlOZK&m'T^o 
[0 2 5 2] 

^LT. XXm^^t^3 7 0 2ti. -r^>h 4 0 0 UC 

9 0 1 i:(Hllt^^:DTW^^^f ^-<:vh4 
0 0 KO^-^y^ r<inetlnfo.exe><inetinfo,exe><reg 
ist.exe>J . hV-rv^riSS. 2 0 1. 5 7. 2J 

[0 2 5 3] 

l3t^^^Ja^P3 7 0 2ti. DT'^ilgS^^OPI^^fT 

h ;l/-;U(;DfU^ffi TALLOWJ ^j5gffibT. IE«i:¥iJ - 

[0 2 5 4] 
(-Y) CGI Oi/jCP 

ata¥cl ient.dbj y7^J\^t't^o 
[0 2 5 5] 

50 m^'^^ TQUERYftSTRINGj tDffi^lS^fX D > -^eofil Tna 
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me=soineoneJ tcSitTsS-^^iP^ Z^::*:^?!]^ miiSf'- ^ ^ 
[0 2 5 6] 

0 1 cm 4 7#ps) ;&^-^>hBJia5 3 7 0 1 tceat- 

rpiLEswRiTEj m^fByy^^^^o^^^"^ '"C:¥d 
ata¥client.dbj mm-f^:y h^^Mr-^^tnnm 
yn-fexoyn-t;^ I D (8 0 1) hJb^ffiiS^ti^c, 

[0 2 5 7] 

:iK^c. 04 7^#pa-r§^. ^-<vhWSa53 7 0 1 

lis >r^>h4 1 0 1 o^--<>h^Ti)jij^ r^'T-r^i/j t 
i^iiijur^o ^om. ^-^>'h4 0 0 1 A^^-f-^vb 

4 1 0 \-^(Om^\^V:y^ts 'l'^>'b4 1 0 It^^^ 

3 7 0 z^cBm-r^o 

[0 2 5 8] 

^LT. silM^m^S 7 0 2tJ:. >f h 4 1 0 UC 

ff-^o ^Ojiliifi. -r-<i>h 4 1 0 1 (O^^y^ r<ineti 
nfo.exe><inetinfo.exe><regist.exe>J . H^-('>'^ 

n 3 3. 2 0 1. 5 7. 2j i:«^-r^o 

[0 2 5 9] 

I5(^*^.a]a53 7 0 2ti:. D T^S>^ 7 4 1 

0 1 tom^^nvo :^m(Dm^. ixT^o;b-;w ms 

90D;U-;1/3) tC'&SCt"Si?3T% ^^0¥iJ5iti{lS TALLO 
[0 2 6 0] 

0. 0. 0. 0/0. < I net i nf o. exeXr eg i st . exe>$. F I LE#W 
RITE. 

C:¥data¥client.db; ALLOW 
12. 4. 3) i/jiWJ2 

mm^^m{'^(om<Dmti.r. fy-^ 3± 

CO^^^TZ/h (133. 201. 57. 2) *^&s ft 
[0 2 6 1] ^ 

co^t. ^1-^1 o^iii?g«i^oi.^'rn:^^f^7T-r 

[0 2 6 2] 

^(D'ik. *5hD^ll3 7(?:)yp-fe^y^2 0 l±OWW 

[0 2 6 3] 

(A) 1 3 3. 2 0 1. 5 7. 2t^(b<DT^'t7.^^iE 
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[0 2 6 4] 

(B) ^yn-feX^^fiRT^o 
[0 2 6 5] 

(C) ?7^a-feXT% ^!ST^-feXtc43tt^^IE*^* 

(C-2) -r— XtcJ^-rS^iET^-trX 
[0 2 6 6] 

±iB (A) . (B) i^mtmi'^mi tmmr^^^fc 
nb. ccviii^m^o^mi'f (c-i) . (c-2) (o^ 

[0 2 6 7] 

12. 4. 3, 1 ) n>'xV^>'«B^^Ci*-r§^iE:7 7 

WWW-9--^^^/cti:^<D-^:/>'X'7"A (^liCGI • 
tBtlCG I) ^Htcflj|||14:6^^?eE-rst30^-r^o 
l^iac G 1 {cm^^ff^^f'^\^> rGET/cgl-bin/regist.e 
xe path=C : ¥ 1 netpub¥wviwrbot¥def au 1 1 . htm&data=abcdj 

T-YyV rc:¥lnetpub¥wwwroot¥default.htmJ tcWLT. 

TabcdJ *^«F#32^^n^^^Oi:-r^o 
[0 2 6 8] 

^^^Tt^n. 7'a-b^;;-»t2 0 ni^-<Vh 4 9 0 1 (1114 
8#PS) ^-I'-^VbWfiSPS 7 0 1 [Z&M^^o 
h 4 9 0 1 COI^^tCti. -:l.^:&<^t. -r-<>h«. TFILE 
#WR1TEJ '^t5^J^:7T^;l/C?3/'^X^ rc:¥lnetpub¥wvm 
root¥default.htmj '^m^ ^> h^±m.X-^^mt^ 
Jj^yn-tXfOT'a-trX ID (8 0 1) tift^W.^^^o 
[0 2 6 9] 

^-^>'hwa0P3 7 0 <r^>h 4 9 0 1 

> hSS^:3-— ti^^^^ h 4 9 0 1 ^oliDT^ (H! 4 8 
#K1) o ^OtSs -r^^ h 4 0 0 1 t-'ib^^y h 4 9 0 
T-\0)I17?[R]U>^^. -<-s>h4 9 0 l*-?>'r^>'^ 
4 0 0 1 ^<DjSe>3fD]U>^^f^linL. -r-^Vh 4 9 0 1 

[0 2 7 0] 

^LT. IAIB?«I*PSP3 7 0 2ti. ^--^Vh 4 9 0 UC 
Pl-^ ^-<> b - =J h IC?^ LT D T fiJ^^tT 

^(Di^M. ^^:yh 4 9 0 1 cD^-f/^ r<inetinf 
o,exe><inetinfo.exe><reglst.exe>J . Kp^-O^ H 
3 3. 2 0 1. 5 7. 2 J tm^-r^o 

[0 2 7 1 ] 

:j^lc. iAS5<#.^953 7 0 2tJ:. D T 1 0?a-&;g:tT 

9, :$:{^^y(Di^-^. WTco;!/-;^ (1113 9 0;l/-;l/6) ic 
? -&Scr'g>^OT\ ^cOW^ffi TDENYJ ^JfffiL. 
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[0 2 7 2] 

0,0.0.0/0. <inetinfo.exeX FILE#WRITE. OE 

NY 

^LT. tS(M^^^3 7 0 2 ti. iStHSTr^^X h r i 3 

3. 20 1. 5 7. 2j ^^rcyT^-A^ra-^ti^^^i^ 

[0 2 7 3] 

T id f e i: 1^ 1i b T ® T' ^ § W ^ ^ n ^ o 

[0 2 7 4] 

10.56.192.0/24. .A<ftpd. exe>+$x F 
ILE#WRITE. C:¥lnetpub¥wwwroot¥,*; ALLOW 

IXT(0)V-J\^ (0 3 9<o;i/— ;l/8) tCcfcO. i3c»T*feS 

[0 2 7 5] 

0.0.0.0/0. FILE#WRITE. C:¥lnetpub¥wwwroot 

¥.*; DENY 

12. 4. 3. 2) f''-t$f-^-:^^<^^IE7'^"tX 

tBticG I) rj:Eicm%mf^^^^r^^<otL. tget 

/cgi-bin/..Hc1%c9../data/client.db HTTP/1. OJ ^^l/^ 
[0 2 7 6] 

C0^§:lfr. 7'a-tr^y^2 0 1 it^^Z^h 5 0 0 1 
4 9#BB) ;^^-^>hWJia5 3 7 0 1 tceJlT^o 
VhSOO IcDrtSlCfi. '>^<i:^>. ^f^Vh* TFI 
LESREADJ i:. mm^yr^J\y<D^^7.^ rciVdataVcIien 

yn-lrXID (8 0 0) ^Tb^lEK^n^o 
[0 2 7 7] 

-Y-^V hgSSlSS 7 0 Hi. 'l'-^>' h 5 0 0 1 
VM^SH^a-tc-r^Vb 5 0 0 1 igrilM/JO-r^o 

-r^v h 3 8 0 1 iy^^^^y h 5 0 0 1 ^cojiS:^fRj 
u yyh. ^^'yv 5 0 0 1 ti^h^^y h 3 8 o i ^<o 
3ffi:^fRiu>^^MiipL. ><-^>b5oo uciMir^-t'-^ 

>h-=3V-r4^XhJ4^ii^SH^aiS5 3 7 0 2\;LBMt 
[0 2 7 8] 

^LT. l3Jl!g«IJaa53 7 0 2ti. ^-^Vb 5 0 0 1 O 
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(7)|g||^ -f^VhSOO r<inetinfo.exe> 
<lnetinfo.exe>J . K>^-0^ H 3 3. 2 0 1. 5 
7. 2 J ^¥iJ2zri)o 
[0 2 7 9] 

ijcS?^*a3gP3 7 0 2ti. DT^g^OPa^^tT 

5o t^TO;b-;l/ (H 3 9 (D;l/-;l/ 7 ) te: 

^Sif ^C0T% ^OMSffi TDENYJ ^ISfflt.. li^SS 

[0 2 8 0] 

/(? 0.0.0.0/0. FILE#READ|FILE#WRITE. C:¥data 

¥.*: DENY 

^LT. licmmms 7 0 2ti:. r3^^K:>1-^X h T i 3 
3. 2 0 1. 5 7. 2J ^-StyT^-A^^K-^tC^^U 

[0 2 8 1] 

13. \) 

0 5O(±. *5S0^O|gl 3^fil5J^®tC*3tt^7T>l'T 

20 :7T'^r^:4-^^vsM5 His 'mz^'M&w^^^^^^^y 

7^7''>^-;biSS5 0S|a»a3 5 0 3*5j:t/<iMfi§a 
ass 0 2tCf^AT. {SS-^— /^a5 5 1 0 1 *5i:l5{iSfi^ 

1^3Elllf=fI5 5 1 0 Z^m^^o 
[0 2 8 2] 

liis 1 ^#R^.*r^^. ^m^-^'^^b 1 0 Hi. mm. 

if lump 5 2 0 1 ^. 5J'i 1 A::^i^^^y:7T 5 2 o z^^xS'Ai 

1 fctJ;^i/^^;/:7T 5 2 0 3 i:. .^2 At)>'^^y 37r 5 2 0 4 
to J: t5|g 2111^1/^^^7 7 5 2 0 5 il^WT^e 

[0 2 8 3] 

30 JgMWJiaPS 2 0 Hi:. >'^^'y V7 ^ )\^^ 1 0 1 

{531 ^ n fc^ T ^ X ^ n § ^Altf^'— ^ ^iH^BiS W 

Ji!!i^f5 5 1 Q2\c7Kt]\.. ^omM\&^Mm^^o ^fc. 

^^D^iliS^-/^^l:^T. ^ l A^l^^^y 77- 5 2 O 2 ^/tti 

mzxti^^^'^yr 5 2 0 4^og*-f— tjf^aiiaii^. 

^1 ai*?/^^;'77 5 2 0 3^fcti^2ai:^/^y7r 5 2 
[0 2 8 4] 

^ 1 Atl^^^y 77 5 2 0 24D<};t/^ 1 m;^I/Vy :77 5 

2 0 3(i. m 1 tDrt«[5iJIlfS-t'>!^-7x-7. 1 0 4;&rt 

[0 2 8 5] 

mZKil^'^-^yr b 2 0 4toJ:D'^2ffitl>'^'y:7 7 5 

2 0 5(j:. :fc^o^rfi2^c^3gr£^nT^5t). ^n^n*5 

^0^S2-N^oS*T•'-^^^ 4ohOiSH2 7b^bOirv'g: 

y^--^^--\^mmt^o ^fc. mmmmm^5 1 o 2 
ti. is«"9-->''?sP5 1 0 1 (ommmm^b 2 0 1 ti-^<o 

50 [0 2 8 6] 
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1 3. 2) m{f 

[0 2 8 7] 
13. 2 . 1 ) {SlSSi 

05 21C*5(,>T, St*. 7 7'-C7">*--'l'^ia3 3*^ 
0 1 i:T^7-tx;iriaiU7.h1S;i!l!f35 1 0 2 ttcJ;oT, ^ 

oiijii^ig*6e.n/-cJt^i-i±. (EJS-y— 1 o i cog 

iirs (^.-r-y >''G 1) o 
[0 2 8 8] 

1 3. 2. 2) HaRt"-:?©— ^tSlfi 

h "7— ^ 4 ±cD-9— ''^t^^^'T aS^x-^^Sfff ^ 

(Xx-y:/G 2) o ^ur. iSilWSgiss 2 o 1 1±, ^ 
1 Xrd^'^'y 7 r 5 2 0 2 tjn 2 A^/^ 

-y7r 5 2 0 4 iitCGSLT, -BftSS^-rS {T.v'-J-f 

G 3) = 
[0 2 8 9] 
13. 2. 3) fiSMW^ 

:^)b. ^©fl^SEc^lx^f u (x-r-y:/G4) , m^«o 
|3a^ltTi:J:t«^*^T•5 (7.-r-yyG5) o 
[0 2 9 0] 

«^SWiia5 5 1 0 2^Ct5^t5«*SS^OS+»7^^^l- 
[0 29 1] 

j:OM(*fi^lc«, XT-yyG8-2r-*3t'3^«2tcJ; 
[0 2 9 2] 

LTt-SSl-rSfc*. ^■<0{ilfUS*IEL<IXf3T-#5o 
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iiaS(ffl*^-Sfr5S*«.2o<Dii^x-^ — :>3 

[0 2 9 3] 

/(; 13. 2. 3. 1) ^ig5)tf^-t$^^fSrtL/ciS^ 

5 2 0 2 t. m^xtj^'^-yyr 5 2 0 4 ^tc. m^^- 

§ttfclg1Atl>'^^y'7 7 5 2 0 2li. lS*>*c1S*fl'f^W 

20 r. :JohDSM24C$£3li-r^o 

[0 2 9 4] ^ 
13. 2. 3. 2) 

S{iL/'ci:#, ^ltti:^/^-y>'7'5 2 0 3ti^iS^S^-r' 
g^rc*iivI]ll;S5 5 2 0 1 XZ^^'^CO&'ofc 
g^G^^ (Xx'>yG7-l) o 
[0 2 9 5] 
13. 2. 3. 3) It/^T^— 
30 }grLgJi^5 2 0 Hi. ^1 ^ti^'^-jyr 5ZQ3tS^ 

r . m 1 f±S:b/^^y >^ T 5 2 0 3 ic^gStt^n/cjC^r'— 

^KiM-r^ (xx^y y G 8 - 1 ) o 

[0 2 9 6] 

13! 2. 4) S^x-^^^«i:bfc^^ ^ 
G5C0N) . HuIE^«-r-^^^«T'£.i)^¥'i^L,. ^ 

2 A:^>'^^y:7r 5 2 0 4co^tc. gARx-^ofEiM^Jg 
(xx>yyG6-2) o mzXH^'^yyr^^ 20 

4ti. ^lCO}g?^^§^tT> iS-^tC^2CDrtgPilfM'Y>^ 
^77x-7. 1 0 5^/t-LT. ^i:0SS2--vmIfB^^7=^ 

[0 2 9 7] 
13. 2 . 4 . 1 ) 

ij^^oWM^fiJ^'TS (xx^y:/G7-2) o 

[0 2 9 8] 
13. 2- 4. 2) 

50 cog^fi^^T^-A^S^LT. 
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G 8-3) o 
[0 2 9 9] 

13. 2. 4. 3) lH'Bfo^^^'^n^^'^rzm^ 10 
Ig^SJigPS 2 0 1 ti. ^i^7^-A^§ttT. ^ 

iKt^^'^-^yy 5 2 0 2-\teS^rS^^5K7^-^'^e3S^ 
Jg^-rs (X7"*yyG8-2) o 
[0 3 0 0] 

[0 3 0 1] 

-^;^-0ttSS«L. tg^WIigi5 5 2 0 1 ti:jSS^O&-:?fc 
^^{eA^ (X-x^y^G 7 - 1) o 
[0 3 0 2] 

jgjtss^r>5 2 0 ^^7- 5203*^ 30 

i^y^^^^m^BM^ntzik. is-^iiituie'i'^^ ^^^^^^ 
X. miai:^/^'y^T5 2 0 3tctsifi^nfcis?§T--^ 

[0 3 0 3] 
1 3. 3) 

iSl 3^fli6J^^lc*5lJ57T^T'>^->^^^i®5 UC 
r(2) r(n) A^feoT. ^03i*0$)^S«x- 

^n?5:7b>o/ch^. r(i) til^gp^-y h 4 ±C0IE 

^j^^_;<;^,2^-r'Hi3M^nSOT% r(1)~r(n) (D^IS:^ 

[0 3 0 4] 

-75. *3^DaS2Tr3(«*^«iai^n/ci:#. 
[0 3 0 5] 
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(V>^*is rsS'VXT^Aj ) Telnet 

[0 3 0 6] 

[0 3 0 7] 
[0 3 0 8] 

H 3b^*5 h D ^il 2 Tf L T V- t^i^T t . ^^^^ 

'^lCiEbi/^=i>xV^y<?:)}ifit*MmT'^So 
[0 3 0 9] 

13. 4 ) ^<*i^y 

13. 4, 1) 

HIS 4:&#Ra-rst> ^'^mmt. ^v^-^-^^yKs 

±(7)FTP^^^T>'h 3 0 2i:. F^as^-^^y h 4 
±(DF T P^->'^4 0 2 ^> y r T \ 

[0 3 10] 

FTPi7^^7>b3 0 2ti. F T P^t->^M 0 21C 

) T^T^^-^y&MS U-^. FTP^^^T>K302 
6 A:^ ^ ^1 S ^ ^45 ^ 0 2 $5il|-r 
So ^etc. *5i:^^ll2coyn^'y^2 0 1 ±Ti^. 
F T P-y— 0 2 ^blllD F T ^'^.^^Sflt^nT 

V^So 

[0 3 1 1 ] 

13. 4- 2) ifti'F 

F T P^^-1'7>1- 3 0 2ti:. F T P ^->'^ 4 0 2 tC 

F T P ^ ^ -t' 7 > h 3 0 2 }b\ 
0 1) g^n^W 
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2) yT^)\yT-j':fu-Y 
To 

[0 3 12] 

^/c. FTP+^-^^4 0 2^fe^0^B2i:^i:^ 

ilOBfe§l14 ^ ^ t> O t* S o 
[0 3 13] 

^eiC. $3^0^lS2CH3(ll1^a^H52 0 2tC(i. 10 
•fe^y^t2 0 1 T'Kf^-r^F T P ^t->'^3b^:^^x>'l^^jSSJ'^ 

;g> c <^ ^^±-r ^ cfc a ^lE^fiji^^s*^^ ^ nr v^ § 

[0 3 14] 
13.4.2.1) (51^^ 

^•r. FTP^^-t'T>^h3 0 2l^. FTP+>— 

0 2-N(Dn^V>'tC5t3i:-:?T> mS^OT C PJSStc^SSjx 
r^tcisb. FTP+>— /^4 0 2te|p]ttTSYN>'^^^y h 

[0 3 15] 

5 1 0 Hi. F T P1^— ^^4 0 2tC<-^t>oT. fiuPlSS Y 
N/^^^y hlci^jS-r^ S YN- A C K^^^y h^lS^f 

[0 3 16] 

^(O'ik. FTP^^^T>'h3 0 2ti. ^^tcACK 
/^^-y h^F T P-y*— >''^4 0 2^[RlttT3ll{i*^^o ^IS 

[0 3 17] 

^LT. 1 0 1 CO^^WJI^PS 2 0 1 

li, FTP-9— ^^4 0 2 ^. ^tommztircnLx. 

FTP^^-rT>h3 0 2tC<-^t)or. {igiJtcTCPlS 

[0 3 18] 
1 3. 4. 2. 2) g«D^V> 

FTP^^-r7Vh3 0 2ti. FTP*9--/^4 

[ 0 3 1 13 ] 

-astc. F T P-9-— >'^l^:5^T^^€ia^-0^^- tiT 
[0 3 20] 

• m 1 iO^At^-r-r$? (r1) : rL—tfS^7r>r '£>OTfe 

— ranonymousj Tfc^o 
[0 3 2 1 ] 

•a5 2COi^5jtf=^-^ (r2) : >'^7.7-F^7js-rt>«OTfe 
-ggl- fuseredoraainj (DJ^ft^^O;?^— F U 
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[0 3 2 2] 

fiMLfcii^. iss-y— /^5 1 0 1 (ommm^s 2 0 

[0 3 2 3] 

^<otk. m 1 oSiRf^'-^ri^fi^a^sgps 1 0 2 

iigiss 1 0 2t±. m^i,£. US 30J;3*li^«sa-5" 
iDL (US 5(ommfm . mms.o^mm'Sim^s z 

[0 3 2 4] 

{fiSU, m 1 7r5202f:>^2 X;d^J-y y 

r 5 2 0 4 135 1 ©jJJiJRT'-^'nofejM^JBTi^-r 

[0 3 2 5] 

^m^m^^-^nrcm i s 2 0 2*3^0-^5 

30 27^i3^^'yyr 5 2 0 *n^n. FTP-9— 

[0 3 2 6] 

^com. ^1 (DSAlt7^-^r1^S<iUrcFTP-9— 
T P-i'5l'7>h 3 0 2--s(B]ltT)MfM-ra„ it^^y'-'^ 

— ^fsia— a^i mti^'^'yyy 5 2 0 stci^sft^nso 

40 ^^^m\^rcm^-. mmmm^ 5201 tce^-r^-o 

[0 3 2 7] 

^UT. JlflgJlrSBfsPS 2 0 1 ti, 1 iiit)^^-yyT 5 
2 0 3lCl«Sfi^nfcfS^7=-iS's1^, F T P<>-7f T> 
h3 0 2lC[RlttrlKiMTSo ^*3,. *5i:O^H2A>e>t. 

^s^x-^si*^5Mfi^n. mz&^tsf^-jyr 5 20 saj 

[0 3 2 8] 

50 J.a±(DJ;?lCbT, FTPi'-7l'7V}- 3 0 2A^c>F 
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[0 3 2 9] 

{sifiitwsiiriP 5 1 0 2ti. ^(Dimm^ tm 

FTP-9— ^^^4 0 2 43j:tf*5^ t)^B2^K3M^nSo 
C-5LT> FTP^^-r7>h 3 0 2ti. FTP-9— 

V^^J-r ^ C :6^T' ^ 
[0 3 3 0] 
13. 4. 2. 3) :7r-i';bT'yyn— F 
SSP^V>^^7 UfcF T P^'^^T^ h 3 0 2 
(i. 7r'^.'l/T^yyn-K^tT-5o F T P1t-lf Xtc^o 

[0 3 3 1] 

rpuT <:7r^;i/«>J o 

[0 3 3 2] 
[0 3 3 3] 

(A) r 3 - 1 : rpUT F I L E. TXTJ 

(B) r3-2: TPUT XXXXXXXX---< 

[0 3 3 4] 

r 3 - Hi. rp I LE. TXTJ ^l/^9^t907T 
-{;V^?T Pit— /^4 0 2tCT'yyn— Fbct^ ^-r^ 

-2ti. F T P^t—/^4 0 2le:/^'y 7 7:t-'>'^— >^D — 

v^x/U^— F^^IEtCF T P'9-^>^^4 0 2rt<Ov'x;l/tC 

[0 3 3 5] 

13. 4. 2. 3. 1) IE«^B^x-i5?r 3-1*^ 
F T P ^^-YTVh 3 0 2*^e»^*-r— ^ r 3 

[0 3 3 6] 

p^x-^ r 3- it^yr-^T^^-)\^I^M5 1 tciij 

;5|55 2 0 1 tci:oT> 35 1 A^^v'^'V 7 T 5 2 0 2^5^:1/ 
mzxti^'^yyy 5 2 0 4 <^:ti:fe*ft^n. MaRx— ^ r 

3 - 1 m§mm.mm&^ 5102 icxii^n^o 

[0 3 3 7] 

li. {i«iii£%^iM-r-7;b{-. r 3 - i 
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mmtLx. mm(D^mm r oj roj 
ig!ssa5 5 2 0 1 {cmt}T^o 

[0 3 3 8] 

g^J^WSSPS 2 0 Hi. H^-r— ^ r 3 - 1 Ofi^JS 

roj ^rofLfcco-^. P^fii rij ^<7)it$$^tToT. 

r 3- 1 ^^^^^^"To ^LT. ^2 A:^>'^*y 7r 5 
2 0 4 <D^lC. SaRt"— r 3- 1 OlEjJlJ&J&^'r^o 
[0 3 3 9] 

JO mz xtj^'^y 7 7 5 2 0 4 ti. mmiMm^^^^^f 

T. ^oi:0SS2tcg*7=^-^ r 3- 1 ^(ciM-rSo 
[0 3 4 0] 

^5^'?^il2{i. r 3- 1 ^SmtT. 7 

rp I LE. TXTJ ;^«i¥Lfd^> ^Wti^^T 
L/iig^e^S/CS-r-^ s 3 - 1 ^jH^-rSo 
[0 3 4 1 ] 

t<D'ik. fSSx— ^s3-ni. 7T-t'7'>:^-— 
H5 UCPML. ^2tB*3>'^*y7r 5 2 0 5t::tS*fl;? 
^2ta:^^^^y7T 5 2 0 5ti. ^og^}g^>m?JlftP 
20 5 2 0 1 icmmr^o ^lt. jg3S^mJigP5 2 o ui. 

5 10 2 tcg^-r— r 3 - 1 A^IE^T'^ 

'Mmv"~yj\y^^mi.r. m^T"-^ r 3 - 1 <Dmm'^ 

;^ ri J tc*r;5o 

[0 3 4 2] 

^ ?>tc. grci:iia;'5f5 5 2 0 1 ti. 2111 xt^^^-y 7 r 5 

2 0 2tcBARx-"^ r 3- 1 cOKi^^Ji^LT. ^lA 
:tl/^'y7r 5 2 0 2tCgAlt7'-i5f r 3- l^FTP+^- 
/^4 0 Zici^^'iE'^^o 

30 [0 3 4 3] 

^(Om. F T P-9--/^4 0 2ti. 7r-<';^ TF I L 
E, TXTJ ^WJf'L. 't(D-f^T^B^^^-^'r—^s 

[0 3 4 4] 

F T P1t->'^4 0 2;b>^(73iSgT^-^ s 3 - 1 ti. m 
1 mti/^'y7r 5 2 0 3lc<§^«^n. m 1 mti^'^-^yT 

5 2 0 3ti:. tcom^mmmm^b 2 0 1 tcii^p-r^c 

^LT. Sl^gSSPS 2 0 1 (i. s3-l^FTP^^ 
^ T V h 3 0 2 tC fejM-r S (lil 5 6 #P.S) o 
40 [0 3 4 5] 

i-X±OJ:3(cLT. F TP^^-^TVh 3 0 2:^)^6311 
{i^n/c7r-i';i/ rp I LE. TXTJ ti:. FTP^t- 
0 2 43cfct/*3i:0^M2tclS«tc{^.??^n^o 
[0 3 4 6] 

13. 4. 2. 3. 2) aii^l^T--^ r 3-2;b^A:^^ 
;j)jtC. F T P^^-rZ^h 3 0 2}b^b^IE^^*-r— 
[0 3 4 7] 

50 gART^— ^ r 3 - 2 :6^7 T 7 ^ — ;b^S 5 1 (CgiJ 
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SSSPS 2 0 1 tC^oT. mi A:^J^^'y:7T 5 2 0 2*3 

^ r 3 - 2 jbMl^SWmaJ 5 1 0 2ti:A:^^n^o 
[0 3 4 8] 

#fS-r'5*\ COt^. -^{i^?. pAt<-r— ^ r 3- 2C0 

0 0 2ti. fi^wa-r-7;i/ic. r 3 - l 

roj ^jgig!wsa5 5 2 0 1 ti:m:^*r^o 

[0 3 4 9] 

jSJ^WJlSP 5 2 0 Hi. ^ARf^-rJ^. r 3 - 2 tO<l^jg 

roj ^^tfbfcto-^. Mfii rij ircDtkK^tToT. 

r 3- 2J&^lli:^:^*ro 
[0 3 5 0] 

^LT. ?f5 2A:^>'^*v 5 2 0 40i^lC. Sg^T^- 
^ r 3-2C0KaM^Ji^-r^o m2A:^/^^y"7T 5 2 0 20 

^ r 3-2^teillf 
[0 3 5 1] 

43i:*;^S2:6^S^T'-t5^ r 3- 2^&§<i-r^^. 7" 
o-t:^;/^t2 0 1 ±T% (ISO) F T P-^"— ^'^fi/^^y :7 T 

r 3-2tC'^^n^^iE^>'x;l/3-K;^^tTLcl;-5^ 
■r^o :fe^0^M2WjCieitJ0g|52 0 2 0i. SiS'>x;l/ 

;i/^S5 ucjliifrSo 

[0 3 5 2] 

;2.hWiig|5i 0 2^. hy^ju^ 1 0 1 titC^-D 

m\C. FTP^^-r7'>h3 0 2*^^iOiXI^OT^-tzX 

^jg^BS-r^c ^/c. I56iai;u-;ww^si5 1 out. t^- 
A(^)^fi^^s^^iia5 5 2 0 1 ictsfti-rso 

[0 3 5 3] 

7^-i.^«3ia]^^tt/cigrL^a^5 2 0 1 (J:, fc 40 
/'c-e.tcF T P ^'^-rT>' h 3 0 2 ^cDjg^^iirrT^o 
SZ-c. gi^b<ti. nliA:^i^^^y77 5 2 0 2tctsas^ 

ntz r 3- 2^?f*rSo 
[0 3 5 4] 

3ir^^LT^4o^O^M2lcPSbn. FTP-y— 
0 2(Ci'mL^V^ ((a5 7#PS) ^ 
[0 3 5 5] 
(35 1 4 ^iSSfgfg) 
^5 SlC^-Tct-plC. rtaS^oy h7-^ 4±i0^t->'^ 50 
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(ffU^if F T P-9-— >'^4 0 2) h^^b^hL^^kWLZ^'prj. 

^!a5 9 0 1 ^^^\cm^x^^\i\ 

[0 3 5 6] 

*5 ^ D 2 T*?$^»*^«ia3^ n:7 r r ;t -^u^s 

5 1 c7:)l5S®J/b-;l/*"J'/i!a5 1 0 7 tC7'v-A;6'«{Kaa^n/c 

l»t»;l/-;l/¥USgP 1 0 7 (i. ^ ^ ^ ^ - y v^'^ . 
fis 9 0 1 tc^.7^-i:^Sfi^iiai-rSo 

[0 3 5 7] 
[0 3 5 8] 

cti/^o ^/c. *5i:0SS2;?)^e)3llff^n§T'^-Atc. 
[0 3 5 9] 

(^1 s^mmm) 

m5 9^t. :^mwm i 5 '^]Kimr#,t-*5tt ^ r r 

^yr^T'^^-jV^m.^ 1 o<SSW->'^5 1 0 1 OfjQ 
ISti:fli^Mfl§P6 2 0 1 ^41^ 'So 
[0 3 6 0] 

B,'V^MBi'i?|5 6 2 0 u^. /^y^y h:7^;U^ 1 0 1 7b^^ 

A:'^ I P^^'Jr^y h^<SS-9*— >'^ 5 i 0 i \n{lB:M't^o ^ 
/t. (g^-y— v'^S 1 0 l5b>^#^n/(:m:^ I P/^^-y h 

^\0\ ice^T^o 
[0 36 1] 

[0 3 6 2] 

(^1 6^siHm-j 

±IBSl~mi 5*fii5m^T'ti:. Ig^gP (^/ctiiSS, 
[0 3 6 3] 
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[0 3 6 4] 

X h wasp^ ^ 7 r r =j- - ;u«s 

[0 3 6 5] 
[0 3 6 6] 

-t'7">:t— ;^^S7 0 0 1 tcti/^^^y h:7>r;Ui5f i o i 

-( -J 7 0 0 2 tci^iii2igi5 5 0 K mnsmmu s 

0 2*5j:t/l»«S;l/— ;l'W^gPl 0 7 5b^Stt8nTV>^o 
/^^^y h^-ryl/^ 1 0 1 ^Ig2i^^5 0 1 ir^DH. 
a\ r ^-bxftl^JU X Ml flOfiiJ 1 0 2 h|56'ffl;b-;U¥ijai 
gr^l 0 7 i:OP^^:7^'y hy-^^^VLTS^-r^Ci; 

5*SSJB9lii:<^^xAS?R5®^>X7^A^^ 

[0 3 6 7] 

(SI 7^fifijg^) 
17. 1 ) ttM 

116 Hi. >*:^i3.ScDmi 7^ffi£?e-«tC^^Ij^m®S/ 
X-rlvCOlllilSfi^^g^IilT'SSo *:^S(iJg^tc^ott§ifcS 
R^^tSivXxAti. ^^r-fT^^-v'U^llS 0 -9--/^ 

0 1 *I^<:O*3^0SS2 (1) -2 (k) 
^^§^^n^4o<^:»?^'^X^2 1 /)^P><g^^n^o 
[0 3 6 8] 

0 1 . ^'^WSgPS 0 0 2. *5cfct>\ {ilgJS^SgU 5 

0 2;&wr^o ss«gi58 0 0 ni> ^-Qxzm^tz.^m^ 

J: 0. rr*Jl(cS{iL/cT^-l2Xtc|5yr^fr5?rm^^fiSi^^ 
wseps 0 2^>b^§ttlx';. ^e>^c. ^l^fi^ig^it 
-/'jwasps go 2-\S[LTii^^^-to^B2 (i) 

gU?T'jt^^n/c1o^0^H2 (i) tL<Cirtgj5#^'y 
h 7 - ^ ^ ft L /c: 7 ^ -fe X ^ tc ai^ r ^ o 
[0 3 6 9] 

-»t->'^WJ1^8 0 0 2ti. 4o^0^vX^ 2 1 tC^^ 

n^4oi:D^S2 (1) ~2 (k) £OiasiJ?<i:i^>^I(i^i 

igi:<D«lCBIIf^^^*r#?.P.^ 8 0 0 3 ^P*5a5W(Cil^T 
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»gP8 0 0 i-Njg-ro 

[0 3 7 0] 

116 2{J:. -9— /^1§B11SP8 0 0 2 ^bViJ-T-S^ra^S 0 

0 3 0-^j3g:^>f<i^iaT'feSo c:CT*ei. *3^0SB 

2 (1) - 2 (k) tc^n^n5^f5r^-*t->'^^S'J^D 

1 - D k iiig^aqiiSiiaiM i -m k i: co«js/)^*s*fi ^nr 

[0 3 7 1] 

17.2) Ifift 

y^? H 6 3 ti. ^^j'm<r)'B 1 7 ^fiSJgrL^lc J:;^!^^^?^®!^/ 
X7"Aoififf^^-r:7n— hr*feSo yr-<T^ 

i^—)vmms ot'^'^—^^^mA o i ^\^t^r>^^'r-j v p 

^Sff-r^i:. ffll^SPS 0 0 1 ^^Xt^^^^-J V p 

tD'>^< h^^-j ^^mmAmmms o 2^tB:^ju. 

y^y hptc3hr-rs^«ST[p]^SttlXS (Xx^y>^I 

n o 

[0 3 7 2] 

jgEt>T. SI«gS8 0 0 Hi. T [pl^+^-z^S 
flilRPS 0 0 2-xW;^L. ^^^< i:'^ 1 oonWJ^^^ct 

gx^o COi:^. +^->^^mJigP8 0 0 2ii. #88^8 0 

•r^yT'I 2^^XS\ 3) c 
[0 3 7 3] 

I 3CDN) . ^>^< ^t>.'9--/^^ia4 0 1 tCiifiJO^T^ 
^i:LT-r^ (XT^^y^I 4) o CCDtia-. ^^tc. 45 

E4 0 1 <Oie»^<i^SNti> #p.g^8 0 0 3<Di^^mmm. 
mu\-uvomi^m^m7.^{§x^'S>^^<otT^ (n 

>max[M1, M2. Mk]) o 
[0 3 7 4] 

m-r^^Sy7-:6^ 1 tX±ttHi^nfctS^ti (X-r ^y ^ 
I 3 COY) > fflUi^n/c:f$Jj"J?^^^gP8 0 0 1 '^jg-T 

(xx^y^i 5) o z.<ot^. *iS(t75^sij?*^ato^n 

ticfcV^o i§3igP8 0 0 Hi:. -9-— >'^SJi§r^8 0 0 2:6^6 

il4 0 1 -x/^'^^y h p^iltoiH-r^ (X-r^y:/! 6) o 
[0 3 7 5] 

•9— /^«B4 0 1 *V^^^y h p^^mt^h. 
Sil4 0 1 ±c?:)+^->'^y^^'^2^^cJ:0/^'>-^y h pOja 

(X-r-yT^I 7) o 
50 [0 3 7 6] 
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m^n^ (7.7"«yyi 8) o fE3ll5tTfe^*5^0 

/-cfc te3M5feJci^-/^^H4 0 1 A^^^n^it^ 
[0 3 7 7] 

17.3) 

[0 3 7 8] 

(SBl 8|/|StHffJ^) 

Cti ^ TSi'^T ^ /c ^fflj^ffi *3 1:)- ^ ii^amfigp 

T' f i ^ < . n':.w-'mmj:^^mmn 5/ x t- ^ 7b- i^'^^i^ 

[0 3 7 9] 
1 8. 1) IS^R 

»y by-^ 8 1 0 S^XXJ^U^^-^-y hV — ^ 8 1 0 4± 
iC^^ 1 OJ-:^±cOlfeSI1^JPi/XxA A Di — A Dn ^ 
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4101 DT3tlS-7T<Jl' 

__J . ^ , 

0.0.0,0/0.<ln8tinfo.exe>.FILE_WRITE,C:¥winnt¥sy8tem32¥LogFiles¥.*,ALLOW 

# {JV-m WWWt-MlCJ:$3>r>7ti«(;)lcji*«I^Rlt5o 
O.O.O.WO,<lnetinfo.exe>,FlLE_READ,C;¥lnetpub¥wwwroot¥,*,ALLC)W 

0.0.0.0/0,<lnetinfo.exe><regist.exe>$,FILE_WRITE,C:¥data¥clienl.db;ALLOW 

# WWWt-/^<01f^y;^rAt'&5ai*CGIiC<l:5x-5''<-;^ftji*€PFnIo 
O.0.0.0/0,<lnetlnfo.exexview.exe> $ ,FILE_READ,C:¥data¥cli8nt.db,ALL0W 

# (jU-;W5) FTP-»^--/<tt3>r>*V||«lCtgtbl/Blte 

ea* K^t'f >10.56.192.0/24*'&«)7;'t^lC|»5 
10.56.192.Q/24/<ftpd.exe>+ $ .FILE_WRITE.C:¥lnetpul)¥wwwrool¥.*,ALLOW 

0.0.0.0/0,<inetinfo.exe>.FILE_WRITE,.*;DENY 
O.O.O.0/0,.*,.*,FILE_READ|FILE_WRITE,C:¥data¥/;DENY 
0.0.0.0/0, •,.*,FILE_WRITE,C:¥lnetpub¥Wwwroot¥.*;DENY 
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[jittSH] ¥^1 5^8.^290 (2003. 8. 2 
9) 

[^miE 1 ] 

mmi^'sms^i 0234 

[0 2 3 4] 

LEJRITEJ ^^-yhS 5 0 ICO^^^h^ TNW^ACC 
EPTJ t^m^T^i^K C(D^-&. -&L:^0^<OT% ^ 

iMmmm^^^ 0237 

[0 2 3 7] 

-fu-^y-^zo lit. ^■/P-txo^^tbf'P^S^t 

T> -f^>h3 8 0 1 (|g|4 4#pa) ^-^^VhgflgP 

3 7 0 1 tcgii-r §0 -r^> h 3 8 0 1 (OrtStCti.. 
J5:<i:^. rpRocjORKj ^^TffJ:7r'i' 

;l/a:)/^XiS rc:¥Web¥inetinfo.exeJ i^^tifc^ 
yn-tXCDT'nHzX I D (8 0 0) ^l^^-^VhtO 

5^^i^(*r$>^7'n-tzX ID (7 0 9) m^M-^n^o C 

[#^*liiE3] 

[*iIE5^^.SS^] B^*fflS 

mjEn&m^^i 0243 

[*iliiE^S] 
[^ilEtOrtS] 
[0 2 4 8] 

0.0. a 0/0. <inetinfo.exe>. FILE^READ. C:¥lnet 
info¥. *; 
ALLOW 

12. 4. 2. 4) -r— XJtf'f 

)]y<Dg?5t<7-'— :5?^OffiJi:LT. TGET /cgi-bin/regist. 
exe nanie=someoneHTTP/1.0j Th^m^omWl^TTs 
To 

[^fc»'iE4] 

mJEn^mS^H 0 2 4 9 

[ffilEiOrtg] 
[0 2 4 9] 

(r) CGI (oi^m 



So ^/t. URL^'^'^P^— ^ rname=someoneJ (i^tSS 
S( TQUERY^TRINGJ tCtSJfl^nTt/^S*>0^"rSo 
[^irt*SlE5] 

[ffiiE^f^ssfe] waas 

[MiEJ^gilRI^JS] 0 2 5 0 
[ffilE:^?*] 
[JfiEOrt^] 
[0 2 5 0] 

iiOSj^^^^t:)-T. T^D-fe.^y-y- 2 0 1 (i-T-^^ h 4 0 

0 1 (114 ems) ^>i'^vhwsgp3 7 0 1 ^fZ&m't 
So -r^> h 4 0 0 1 ortstcti. < ^ 

rpROCJXECj m'<yByr-f)V(D^^:^^ rc:¥ln 
etpub¥scripts¥regist.exej i:. tulBI^^yn-feX^oya 
•bXID (8 0 1) ^IS-f^>h<0ig^i^.T^St9 
fiB^ya-tXOyn-feX ID (8 0 0) ^>^SlB«^n 
So ^om. 31JI^§(COtSffi^H^^A6T^<tV-o 

[#g£tiIE6] 

[^ililEmSSI^.] BiJSflffl 

miEt^mms^i 0 2 5 5 

[*iIE75ffi] 

[^lOiEcort^] 

[0 2 5 5] 

mm.'m^ tqueryjiringj com^m^mo. ^(om rna 

me=someoneJ \c ^^tU ^ tcSC-Pn ^ fiu SBt=^- ^ ^ 

-xco7i^^iciifB-rs^^oi:-rso 

[¥^ffliE7] . 

immnmrni^i mmm 

[IfilE^^^JSg^] 0 2 5 6 
[MiE:^^] 

[ffiiEortS] 

[0 2 5 6] 

CCOi/jf^^^^tT. •/a-tr^y-9-2 0 ni:'Y^>'h 4 1 
0 1 (114 7#S§) ^-<-Oh1Sfll!ft|i3 7 0 1 ICBMT 
So -f-^>b 4 10 1 tDF^StCii. ^>;&< 

h€, tfilejritej ^iTJg7r-i';u^o/^x«, rc:¥d 

ata¥ciient.dbj h^^mr*&^mSB 
yn-feXcO^n-tX I D (801) tii^^^n^o C 
Ofik. S^mt/cx-^cOI^^^H^^^T^xfcV-o 
[#^*liE8] 

miEtimmi^i mmm 
miEti^ms^^ 0 2 6 0 

[ffiIE7^?i] 
[ffljEOF^S] 
[0 2 6 0] 

0. 0. 0. 0/0. < I net i nf o. exeXreg i st . exe>$. F I LE^W 
RITE. 

C:¥data¥cl ient.db; ALLOW 

12. 4. 3) wmnz 
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0^^-<T>h (1 3 3. 20 1. 5 7. 2) A^E). ^ 
[0 2 6 8] 

fulS^jET^-trX?b^S-3/cS^. tutBlfif^ (C-1) 
5b^tTt>n. ya-t>y-9-2 0 ni:-<-^Vb4 90 1 (04 
8#S§) ^-r^>h®ll^fP3 7 0 1 IcGilt-^o -f-^^ 
h 4 9 0 1 OP^^tCti. ^>^< h'ti. >r^Vh«i TFILE 
JRITEJ »T?f$:7T>f;UO/^X« rc:¥lnetpub¥www 
rootVdefault.htmj ^^^T-^^V bfe^*iiTS>^nunS 
f^.yn-hXcoyn-feX I D (8 0 1) ^^b^lBlE^n^o 

[#^ffiIEl03 

limnm^mB^i 0272 

[0 2 7 2] 

0.0.0.0/0. <inetinfo.exeX FILE^WRITE. DE 

NY 

^br. ifcS?^1^Joj^3 7 0 2Ci. ijiiPTL^-^xh r 1 3 

3. 2 0 1. 5 7. ^^ :^^tST^-L.^W.'hiC±^S.l- 
i^mMiEi 1] 
mmnmrns^^ 0 2 7 4 

[^iliiET??*] 
[^ilEOrtg] 
[0 2 7 4] 

t^TO;!/--;!/ (113 9co;l/-;b5)tc^S(L^^i/>|5MO. 

10.56.192.0/24. A<ftpd. exe>+$. F 
tLE^WRITE> C:¥Inetpub¥wwwroot¥.*; ALLOW 



i^mmiEi 2] 

C*SiEi4S3SS«.] 0 2 7 5 
[0 2 7 5] 

0.0.0.0/0. FILE^WRITE. C:¥lnetpub¥wwwroot 

¥.*; DENY 

12. 4. 3. 2) t'—^-^—Ts^CO^JET'^'^:^ 
WWW-tl— /^Sfcti^O-9-y>'X'rix (MiiCG I • 

m:^c G I ) ^^^tcuf^ijsttJb^rjfiE-r^^o^L. tget 

/cgi-bin/..%cl%c9../data/client.db HTTP/1. OJ i:V- 
[^J^MiEl 3] 

miEt^mm^i 0276 

[tflEcOl^S] 
[0 2 7 6] 

tO^^ttr. ya-t^y+)-2 0 Ui-Y^^^ 5 0 0 1 (H 
4 9#?S) ;&^^>hWIlSP3 7 0 1 tcSii"^^o -l'-^ 

>h 5 0 0 1 <D[Hmizit. ^>^< -r-obS rpi 

LEJEADJ *tTJK7T-r;^^0/^XS rc:¥data¥clien 
t.dbj mm^^>h^^Ur-&^ttjB^'^'f\:i-^7.(D 

ya-txiD (8 0 0) tm^m-^n^o 

[^'^^^fiEl 4] 

[*iiE«^»3a^] mmm 
mmnmm^^ o 2 » (3 

[MIET??^] 
[ffilEOrt^] 
[0 2 8 0] 

0.0.0.0/0, FILE^READIFILE^WRITE. C:¥data 

¥.*; DENY 

^ LT. ifelS«ia]SI53 7 0 2 ti. lfel?7C^>X b T 1 3 
3. 2 0 1. 5 7. 2J ^I^CyT^-i^^nli-^tC^fiKb 
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